Samsara
Senior Security Engineer, Vulnerability team
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Samsara
Samsara Inc. is a San Francisco-based IoT and cloud software company founded in 2015 by Sanjit Biswas and John Bicket. The company specializes in its Connected Operations Cloud platform, which digitizes physical operations across various industries, including transportation, construction, logistics, and manufacturing. Samsara initially focused on fleet telematics, launching its first Vehicle Gateway for real-time tracking of GPS location and vehicle diagnostics. The Connected Operations Cloud integrates hardware like gateways and sensors with cloud software and AI to enhance operational efficiency and safety. Key offerings include vehicle telematics, AI-powered dashcams, and equipment monitoring tools. Samsara has grown significantly, serving over 20,000 customers and achieving over $1.2 billion in annual recurring revenue. The company has expanded globally, with offices in multiple cities, and is recognized for its impact on reducing CO2 emissions and improving operational practices across various sectors.
Security at Samsara
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Samsara's Application Security philosophy is built on 'defense in depth' and the 'shift-left' mentality.
- Security is viewed as an embedded component of the business rather than an external gate.
- There is a strong emphasis on 'Remediation Operations,' which focuses on scaling vulnerability decision-making and integrating security directly into the developer workflow via CI/CD pipelines.
Security Team
- Samsara's security organization includes dedicated teams for Application Security, Vulnerability Management, and Security Assessment.
- These teams report to senior security leadership, such as the Head of Security.
- The team is currently expanding, with active recruitment for roles that own the end-to-end operation of vulnerability management programs and their integration into CI/CD pipelines.
Key Initiatives
- Current initiatives at Samsara include the formalization of 'Remediation Operations' to improve the speed and scale of vulnerability fixing.
- A major technical initiative is the deep integration of vulnerability management tools (like Wiz and Semgrep) into the CI/CD pipeline to automate security feedback for developers.
- The team is also focused on owning and maintaining a comprehensive vulnerability management program that spans the entire application lifecycle.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.