Tech Stack

Description

You will lead and maintain Samsara's threat modeling program, collaborate with engineering teams to remediate vulnerabilities, and contribute to compliance reporting, helping protect the IoT platform that powers critical industries.

Requirements

• 6+ years of experience in application/product security and threat modeling in enterprise
• Deep familiarity with OWASP Top Ten, STRIDE (or equal), MITRE ATT&CK
• Experience defining and driving SDLC adoption with engineering teams
• Experience managing Bug Bounty programs such as Bug Crowd
• Strong communication and collaboration skills

Responsibilities

• Lead and own ongoing operation and maintenance of threat modeling program
• Assist in detecting and raising risks, recommending next steps balancing business needs
• Work with Vulnerability TPM to generate monthly and quarterly compliance reports
• Collaborate with engineering teams to track and support remediation of vulnerabilities
• Participate in security incident investigations related to high-profile vulnerabilities