About this role
Evaluating firmware vulnerabilities on hardware and red-teaming cloud environments using frontier AI models constitutes the core of daily operations for this new role. Serving as the primary AI-focused technologist within the Application Security team, the engineer secures applications against AI adversaries by combining security engineering with applied artificial intelligence. Responsibilities include defining security strategy across software and hardware domains while operating within a recently public connected operations platform provider.
Shaping medium- and long-term security strategy requires partnering closely with engineering, hardware, and leadership teams during high-visibility threat modeling sessions. Candidates who thrive in this position possess extensive application security backgrounds alongside hands-on experience integrating or red-teaming AI systems. Autonomous problem solvers eager to establish novel security workflows for physical operations infrastructure will find a supportive environment for career development.
What you will do
- Deliver accurate and consistent security assessments of software, code, and firmware to evaluate resilience against AI-driven attacks and implement necessary fixes.
- Translate general AI security findings into Samsara-specific fixes for the application security layer, adapting software techniques for hardware and embedded firmware.
- Build and pressure-test novel AI-enabled security tooling and workflows while driving adoption across the broader security organization.
- Partner cross-functionally with engineering, hardware, and leadership as the go-to expert on AI-related security risk.
- Define and drive medium- and long-term strategy for adopting AI safely and effectively within security operations.
- Use frontier AI and LLM tools hands-on for offensive red-teaming and defensive tooling implementations.
What you need
- Bring 8 or more years of professional experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline.
- Demonstrate application fix impact and influence across a large part of an organization.
- Possess hands-on experience applying AI and LLM tools to real security workflows such as building with APIs, agents, or automation.
- Conduct technical security assessments across both software and hardware or firmware environments.
- Create solutions for secure code using languages like GoLang.
- Develop AI and agentic solutions using GitHub and develop applications within AWS cloud environments.
Nice to have
- Experience with AI-specific attack techniques including prompt injection, jailbreaks, and model or agent abuse.
- Experience building or validating security controls for agentic AI, RAG systems, or LLM-integrated platforms.
- Track record of driving org-wide security strategy or presenting technical findings to senior and executive stakeholders.
- Relevant industry certifications such as OSCP, GIAC, CISSP, or AWS certifications.
Benefits
- Initial RSU grant with no vesting cliff and ongoing refresh opportunities tied to performance
- Flexible, employee-led remote model
- Professional development stipend
- Comprehensive health and parental leave plans
Skills and tech stack
Questions candidates ask
What is the remote work policy for this position?
This is a remote position open to candidates residing in the US except the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area. The company embraces a flexible working model that supports remote work where it aligns with operational requirements.
What is the compensation range and total rewards structure?
The range of annual base salary for full-time employees is $157,675 to $238,500 USD, though base pay offered may vary depending on factors including city of residence, job-related knowledge, skills, and experience. This role is also eligible for an initial RSU grant with no vesting cliff and ongoing performance-based refresh opportunities.
What technical background is required for this role?
Candidates need 8 or more years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline. Required experience also includes hands-on integration, securing, or red-teaming of AI-enabled systems alongside development familiarity with GoLang, GitHub, and AWS.
Where does this role sit within the organization?
This is a brand-new role at the intersection of security engineering and applied AI on the Application Security team. It is a highly visible, org-wide position reporting into a newly formed function with a clear path to shape AI security strategy.