Staff Offensive Security Engineer - IoT

Who we are

Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing — and we are excited to help digitally transform their operations at scale.

Working at Samsara means you’ll help define the future of physical operations and be on a team that’s shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, Equipment Monitoring, and Site Visibility. As part of a recently public company, you’ll have the autonomy and support to make an impact as we build for the long term. 

Recent awards we’ve won include:

Great Place To Work Certified™ 2023

Best Place to Work by Built In 2023

Financial Times The Americas’ Fastest Growing Companies 2023

Deloitte Fast 500 Companies

IoT Analytics Company of the Year in 2022’s IoT Breakthrough Winners

We see a profound opportunity for data to improve the safety, efficiency, and sustainability of operations, and hope you consider joining us on this exciting journey. 

About the role:

We’re seeking a talented Staff Offensive Security Engineer well-versed in red team/offensive security. The right candidate will be knowledgeable, have hands-on offensive IoT embedded security experience, be passionate about finding security threats, be energetic, and thrive in a fast-paced environment. As part of a fast-growing engineering organization, you’ll work alongside technical product managers and security engineers passionate about building highly scalable products. Your offensive security threat contributions will be critical to shaping our overall security and compliance strategy.

You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact—helping to keep the lights on, get food into grocery stores, reduce emissions, and, most importantly, ensure workers return home safely.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development and countless opportunities to experiment and master your craft in a hyper-growth environment.
• You’re energized by our opportunity: Our vision to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-caliber team that will encourage you to do your best. 

Click here to learn about what we value at Samsara. 

In this role, you will: 

• Collaborate with our Hardware Engineering and Security Engineering teams on secure component selection relating to secure boot and roots of trust
• Collaborate with Engineers across product teams to continually improve our firmware design, development, and deployment practices
• Stay up-to-date on the latest emerging hardware security threats and technologies
• Conducts periodic scans of embedded Samsara products to find and detect vulnerabilities
• Perform penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools
• Able to conduct cyber risk assessments using frameworks or standards like NIST CSF, ISO 27001/2, PCI, CIS Top 20, CMMC, or other industry measurement tools
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team) as we scale globally and across new offices

Minimum requirements for the role:

• Ability to scope engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel
• Report generation that clearly communicates testing and assessment details, results, and remediation recommendations
• Deep subject matter exper