Senior Security Engineer - Threat Modeling

1 month ago
Full-time
Senior
Cybersecurity
Samsara

Samsara

Samsara pioneers the Connected Operations Cloud, offering AI safety programs, real-time visibility, and integrations for industries to enhance efficiency, safety, and sustainability globally.

IT Services
1K-5K
Founded 2015

Description

  • Lead and own the ongoing operation and maintenance of Samsara’s threat modeling program.
  • Detect and assess security risks across the Samsara ecosystem and recommend appropriate next steps.
  • Work with the Vulnerability Technical Program Manager to produce monthly and quarterly compliance reports.
  • Collaborate with engineering teams to track and support remediation of identified vulnerabilities.
  • Participate in security incident investigations related to high-profile vulnerabilities and assess potential impact.
  • Contribute to documentation and process improvements that streamline risk management workflows.
  • Support security best practices and help balance security needs with business priorities.
  • Be regularly on call to support security operations.

Requirements

  • 6+ years of relevant experience in application or product security and threat modeling in an enterprise environment.
  • Deep familiarity with OWASP Top Ten, the STRIDE threat modeling framework or equivalents such as PASTA or DREAD, and MITRE ATT&CK.
  • Experience defining and driving SDLC adoption with business-focused engineers.
  • Experience managing bug bounty programs such as Bugcrowd.
  • Strong familiarity with common security vulnerabilities and the ability to judge their severity and business impact.
  • Experience coding with Python or Go.
  • Security certifications such as CISSP or AWS Certified Security Specialty are preferred.
  • Experience with FedRAMP and other regulatory security requirements is preferred.
  • Experience with Semgrep or Wiz is preferred.
  • This is a remote position open to candidates residing in Canada.

Benefits

  • Annual base salary of CAD $150,025 to $194,150.
  • Eligible for an initial RSU grant with no vesting cliff and ongoing refresh opportunities tied to performance.
  • Above-market total compensation with base salary, performance-based bonus/variable pay, and equity for eligible roles.
  • Flexible, employee-led remote work model.
  • Comprehensive health plans.
  • Parental leave plans.
  • Professional development stipend.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Product Security Intern

Funding Societies 251-1K Capital Markets

Funding Societies | Modalku is seeking a Product Security Intern to help strengthen secure software development and security automation across its engineering environment using Generative AI and modern security tooling.

Bash CI/CD Cybersecurity Encryption Generative AI Git Go JavaScript LLM Penetration Testing Python
17 hours, 5 minutes ago

Staff Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Staff Product Security Engineer to embed security into cloud-native product delivery, harden Kubernetes and CI/CD environments, and reduce supply chain risk across its open source build platform.

AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
18 hours, 13 minutes ago

Senior Application Security Engineer

Onit 251-1K IT Services

Onit is hiring a Senior Application Security Engineer in Pune to secure its SaaS applications, APIs, and AI-driven platform through hands-on security architecture, risk assessment, and vulnerability management.

AWS Azure CI/CD DevSecOps GCP GraphQL OAuth OpenID Connect REST API SAML SonarQube System Design
1 day, 1 hour ago

Application Security Engineer

Brex 1K-5K Diversified Financial Services

Brex is hiring an Application Security Engineer to help secure its finance platform by finding and responding to vulnerabilities, supporting secure development, and contributing to AI security efforts across cross-functional teams.

AWS GraphQL gRPC Kotlin Kubernetes Penetration Testing Python
1 day, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers