Security Engineer

At Snorkel AI, we’re redefining how people and organizations build AI applications. Snorkel started as a research project in the Stanford AI Lab in 2016, creating a higher-level interface to machine learning through programmatically labeled and managed training data. From deploying in some of the world’s largest and most sophisticated tech organizations, to empowering scientists, doctors, and journalists — we’ve seen firsthand how this approach democratizes and accelerates AI. Now, we’re building Snorkel Flow to bring our technology to everyone!   Building Snorkel Flow requires outstanding engineers and technologies across the stack, including scalable data pipelines, elegant and intuitive interfaces (both visual and programmatic), state-of-the-art ML modeling techniques, and best practices for seamless deployment. Modern AI approaches require large labeled training datasets to learn from. While traditional approaches typically rely on armies of human annotators to label by hand, Snorkel Flow empowers users to programmatically label and build training data sets to drive a radically faster, more flexible, and higher quality end-to-end AI development process. Snorkel Flow is an end-to-end development platform, complete with a GUI and powerful programmatic interfaces for driving the development process for full AI application workflows: from preprocessing, to programmatic training data creation, to ML model training, to analysis, and deployment. It's the data-first platform for enterprise AI.   Excited to help us redefine how AI applications are built? Apply to be the newest Snorkeler!

As the first and leading Security Engineer at Snorkel AI, you will establish the security bar and standardize security practices at Snorkel AI. You will achieve that by working and collaborating with cross-functional teams to provide guidance on security best practices. The security team is responsible for leading and implementing the various initiatives that relate to improving Snorkel AI's product and infrastructure security.

Main Responsibilities

• Implement and enhance software security SDLC tools and processes 
• Drive and implement continuous security practices and posture for infrastructure such as K8s and AWS
• Find and remove outdated and vulnerable code and code libraries.
• Develop security training and guidance to internal development teams
• Provide subject matter expertise on architecture, authentication and system security
• Create and maintain artifacts in a protected repository established as a single source of truth
• Assess security tools and integrate tools as needed, particularly open-source tools
• Drive and collaborate on security and compliance certification such as SOC2, ISO27001, PCI, HIPAA, etc.
• Handle communications with independent vulnerability researchers and design appropriate mitigation strategies for reported vulnerabilities.
• Assist with customer engagements regarding security policies communication, documentation and vendor questionnaires
• Work a hybrid schedule with one or two days per week in our Redwood City HQ and work remotely with "No Meeting" Tuesdays and Thursdays

Preferred Qualifications

• Familiar with common security libraries, security controls, and common security flaws that apply to software products, SaaS and public clouds
• Ability to discover and patch SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond).
• Knowledge of common authentication technologies including OAuth, SAML, CAs, OTP/TOTP.
• Knowledge of browser-based security controls such as CSP, HSTS, XFO.
• Experience with standard security scanning, testing and monitoring tools such as Bandit, Twistlock, Aqua Security, Snyk, AWS GuardDuty, among others.
• Familiarity with public cloud best practices for security.
• Ability to clearly and professionally handle communications with outside researchers, users, and customers.

The salary range for our Tier 1 locations of San Francisco, Seattle, Los Angeles & New York is $191,000.00 - $225,000.00.

Be Your Best At Snorkel Snorkel AI is on a mission to make machine learning practical for everyone, and it starts with building a team that welcomes, represents and gives opportunity to all. We work at the frontier of AI and software engineering, and believe that underrepresented communities need to play a part in shaping the future of these fields. At Snorkel AI, we actively work to create an environment that values end-to-end ownership, diverse forms of impact, and opportunities for personal growth.   Snorkelers are supported by an amazing team and an amazing set of benefits. We offer comprehensive medical, dental, and vision plans for Snorkelers and their families, pl