Senior Product Security Engineer

Every day, the world gets more digital thanks to tens of millions of developers building the future faster than ever. But with exponential growth comes exponential risk, as outnumbered security teams struggle to secure mountains of code. This is where Snyk (pronounced “sneak”) comes in. Snyk is a developer security platform that makes it easy for development teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and cloud infrastructure — and do it all right from the start. Snyk is on a mission to make the world a more secure place by empowering developers to develop fast and stay secure.

The role of a platform security engineer is to work closely with cloud infrastructure teams within Snyk to ensure that security requirements are identified and security best practices are followed in the SDLC.

They will use industry standard security tooling, such as IaC scanning, Container scanning, and CSPM tools, to help teams identify and remediate platform security vulnerabilities at all stages of the development lifecycle..

The ideal candidate will have a history of contributing as a DevOps engineer, or in some other role that involves directly managing cloud infrastructure, and working in a security focused role with good knowledge of DevSecOps concepts such as threat modeling, shift-left security testing, and continuous security monitoring.

You’ll Spend Your Time:

• Using security tooling to drive the identification and prioritisation of security items on platform team backlogs
• Identifying security requirements for platform infrastructure via Threat Modeling.
• Integrating automated security testing tooling into CI/CD pipelines and supporting findings triage and remediation activities
• Securing Kubernetes clusters and containerised workloads
• Integrating CSPM tooling and ensuring deployed cloud infra resources are compliant with Snyk’s security standards

What You’ll Need:

• Experience as an individual contributor within a team managing the deployment of cloud resources (experience as a DevOps engineer)
• Knowledge of platform infrastructure secure configuration baselines (CIS benchmarks) and security best practices
• Knowledge of security compliance frameworks (ISO 27001, NIST 800 53), specifically surrounding controls which relate to platform infrastructure configuration.
• Strong depth of knowledge in AWS & GCP
• Knowledge of what security tooling and services are available from AWS and GCP
• Experience managing cloud infrastructure using IaC tools (i.e. Terraform) and deployment via automation (CI/CD pipelines, GitOps)

We’d be Lucky if You: 

• Have worked within the DevSecOps space previously
• Have experience of offensive security or adversary simulation activities against Cloud Infrastructure

#LI-TF1

We care deeply about the warm, inclusive environment we’ve created and we value diversity – we welcome applications from those typically underrepresented in tech. If you like the sound of this role but are not totally sure whether you’re the right person, do apply anyway!

 

About Snyk

Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.

Benefits & Programs

Prioritize health, wellness, financial security, and life balance with programs tailored to your location and role.

• Flexible working hours, work-from home allowances, in-office perks, and time off for learning and self development
• Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers
• Health benefits, employee assistance plans, and annual wellness allowance
• Country-specific life insurance, disability benefits, and retirement/pension programs, plus mobile phone and education allowances