About this role
Security professionals who thrive at the intersection of offensive testing and applied machine learning will find an ideal challenge in this newly created position. As the primary AI-focused technologist on the application security team, the incoming engineer spends their days utilizing frontier models to red-team cloud environments and validate hardware firmware vulnerabilities against AI adversaries. Operating out of a newly formed function with high organizational visibility, the person in this role directly shapes the long-term AI security strategy for a publicly traded platform specializing in physical operations and IoT data.
Samsara designs connected solutions for industries that form the infrastructure of the global economy, spanning transportation, manufacturing, and construction. Team members enjoy significant autonomy to build novel AI-enabled security tooling while partnering cross-functionally with engineering, hardware, and executive leadership. Ideal candidates bring deep expertise in both traditional application security and hands-on AI integration, combining technical rigor with a drive to secure systems powering critical real-world operations.
What you will do
- Deliver accurate and consistent security assessments of software, code, and firmware to evaluate resilience against adversarial AI attacks.
- Translate general AI security findings into platform-specific fixes for the application security layer, adapting techniques from software to hardware environments.
- Build and pressure-test novel AI-enabled security tooling and workflows while driving adoption across the broader security organization.
- Partner cross-functionally with engineering, hardware, and leadership as the primary expert on AI-related security risk.
- Help define and drive medium- and long-term strategy for adopting AI safely and effectively within security operations.
- Use frontier AI and LLM tools hands-on for offensive red-teaming and defensive tooling.
What you need
- Bring over 8 years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline.
- Demonstrate hands-on experience applying AI and LLM tools to real security workflows such as APIs, agents, or automation.
- Possess technical security assessment experience across both software and hardware or firmware environments.
- Create solutions for secure code with engineers using programming languages like GoLang.
- Develop AI and agentic solutions utilizing Github and operate within AWS cloud infrastructure.
- Integrate, secure, or red-team AI-enabled systems including LLMs, agentic workflows, and prompt injection testing.
Nice to have
- Experience with AI-specific attack techniques like prompt injection, jailbreaks, and model or agent abuse.
- Experience building or validating security controls for agentic AI, RAG systems, or LLM-integrated platforms.
- A track record of driving organization-wide security strategy or presenting technical findings to senior leadership.
- Relevant industry certifications such as OSCP, GIAC, CISSP, or AWS certifications.
Benefits
- Base salary range of $157,675 to $238,500 USD
- Initial RSU grant with no vesting cliff and ongoing performance refresh opportunities
- Flexible, employee-led remote working model
- Professional development stipend
- Comprehensive health and parental leave plans
Skills and tech stack
Questions candidates ask
What is the remote work policy for this position?
This is a remote position open to candidates residing in the US except the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area. The company embraces a flexible working model that caters to diverse team needs while supporting remote work where it aligns with operational requirements.
What is the compensation range and structure?
The annual base salary range for full-time employees is $157,675 to $238,500 USD, with exact pay varying based on city of residence, knowledge, skills, and experience. This role is also eligible for an initial RSU grant with no vesting cliff and ongoing performance refresh opportunities.
What kind of hands-on technical experience is required?
Candidates must have over 8 years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline. This includes hands-on experience applying AI and LLM tools to real security workflows, conducting assessments across software and hardware environments, and developing solutions using GoLang, GitHub, and AWS.