Sr Offensive AI Security Engineer II

MA · Denver · USD 157,675-238,500 / year · 8+ years experience · Remote · Posted Oct 8, 2026

At a glance

Samsara is building a new role at the intersection of security engineering and applied AI, positioning you as the most AI-forward technologist on the Application Security team.
You will use frontier AI models to find vulnerabilities across cloud, software, and firmware before attackers do, while evaluating models for security use and building guardrails for safe adoption.

Deliver accurate, consistent security assessments of Samsara's software, code, and firmware, evaluating their resilience against AI-driven/adversarial attacks, and implementing fixes.
Create and translate general AI security findings into Samsara-specific fixes for our application security layer— including adapting techniques built for software to apply to hardware and embedded firmware.
Find both AI-specific and traditional vulnerabilities (e.g., injection, IDOR) using AI-driven offensive validation.
Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption of what proves valuable across the broader security org.
Benchmark each new frontier model against the previous one for security tasks, and build the release criteria and guardrails for adopting it.
Support AppSec vulnerability triage through an office-hours rotation, and help run our bug bounty program, with potential expansion to hardware.
Partner cross-functionally with engineering, hardware, and leadership, presenting findings to security and executive leadership as Samsara's go-to expert on AI-related security risk.
Help define & drive Samsara's medium- and long-term strategy for adopting AI safely and effectively within security operations.
Use frontier AI/LLM tools hands-on for both offensive validation (red-teaming our own systems) and defensive tooling.
Champion, role model, and embed Samsara’s cultural principles as we scale globally and across new offices.

8+ years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline, with demonstrated application fix impact and influence across a large part of an organization.
Hands-on experience building AI or agentic workflows for security use cases.
Experience conducting technical security assessments (e.g. offensive security or validation exercises) across both software and hardware/firmware environments.
Experience in creating solutions for secure code with engineers using languages such as GoLang.
Experience developing AI and agentic solutions using Github, and developing within AWS cloud.

Experience with AI-specific attack techniques (prompt injection, jailbreaks, model/agent abuse) for vulnerability management and application security.
Experience building or validating security controls for agentic AI, RAG systems, or LLM-integrated platforms.
Experience red-teaming LLM-enabled systems (prompt injection, agent abuse).
Experience evaluating or benchmarking LLMs.
Bug bounty platform experience (e.g., Bugcrowd).
Experience in federal or FedRAMP-style environments.
A track record of driving org-wide security strategy or presenting technical findings to senior/executive stakeholders.
Relevant industry certifications (e.g., OSCP, GIAC, CISSP) or AWS certifications.

Offers a flexible, employee-led remote model with offices open for those who prefer to work in-person.