SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, a platform enabling organizations to harness IoT data for actionable insights across physical operations including agriculture, construction, field services, transportation, and manufacturing.
You will support the ongoing operation and maintenance of Samsara's vulnerability management program, ensuring consistent execution of security processes. Key responsibilities include managing vulnerability scanning tools, refining detection capabilities to improve accuracy and reduce false positives, and working closely with the Vulnerability Technical Program Manager to generate and distribute monthly and quarterly compliance reports.
You'll collaborate with engineering teams to track and support the remediation of identified vulnerabilities, providing guidance on best practices. You'll assist in analyzing and triaging vulnerabilities, escalating critical issues to senior security engineers or Security Operations as needed. Participation in security incident investigations related to high-profile vulnerabilities is expected, helping gather data and assess potential impact on Samsara infrastructure.
Contributing to documentation and process improvements to streamline vulnerability management workflows is part of the role. You'll champion Samsara's cultural principles—Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team—in daily work.
Required skills include familiarity with security engineering best practices and common security vulnerabilities, with the ability to assess their severity and impact. Scripting experience in Python and Pandas data analysis package is needed for automation tasks. Understanding of cloud environments (AWS preferred) and infrastructure-as-code concepts (Terraform experience is a plus) is essential. You should have hands-on experience in Linux-based environments and troubleshooting security-related issues. Exposure to security automation tools (Tines, AWS Lambda) and vulnerability management tools (Wiz, Semgrep) is beneficial.
