Staff Security Engineer

8+ years in security engineering, including at least 4 focused specifically on securing cloud environments at production scale.

Expert level AWS security and strong working knowledge of GCP. You can reason about IAM policy evaluation, organization level guardrails, network and VPC design, key management and encryption, and logging architecture without reaching for the documentation.

Deep, hands-on cloud IAM expertise. Designing least privilege models across multi-account and multi-project estates, right-sizing over-permissioned roles without breaking production, and managing non-human identities, workload identity federation, and secrets at scale.

An attacker's understanding of cloud. You know how cloud environments actually get compromised (credential and token abuse, IAM privilege escalation chains, metadata and workload identity abuse, exposed storage and services, CI/CD and supply chain paths) and you design controls against those paths rather than against a checklist.

Real ownership of an enterprise CSPM or CNAPP platform. Onboarding accounts, tuning signal to noise, building remediation workflows, and holding the line on posture metrics over time.

Infrastructure as code and genuine coding ability. Terraform, Python or Go.

Kubernetes security in the cloud. RBAC, service accounts and token handling, admission control, workload identity, network policy, and container runtime posture.

Practical experience applying AI to engineering work. You have built something real with LLM APIs or agent frameworks, and you understand AI specific risk (prompt injection, over-permissioned agents and tools, untrusted tool and MCP servers, data leakage) well enough to design controls for it.

Enterprise identity platform security. Hands-on with a major IdP: policy design, federation, phishing resistant authentication, privileged access, and access review.

Cloud detection fundamentals. Cloud provider audit logs and native threat detection services, what good cloud detection logic looks like, and how cloud telemetry lands and gets queried in a SIEM.

Strong written communication and stakeholder influence.

Bachelor's degree in computer science, information security, or information technology, or equivalent practical experience.

Have worked in the DevSecOps, cloud security, or AI industry, or have defended a security product company.

Have built agentic security tooling, MCP servers, or internal AI platforms, and have well formed opinions about where they should and should not be trusted.

Have done cloud incident response or cloud threat hunting on a real intrusion.

Have contributed to open source cloud security tooling, or published research on cloud attack techniques.

Have led a cloud migration or a multi-cloud consolidation and lived with the security consequences.

Have worked in a FedRAMP, NIST 800-53, or similar regulated cloud environment.

Hold relevant security certifications. None are required, but they are welcomed. Examples include:

CISSP (Certified Information Systems Security Professional)

CCSP (Certified Cloud Security Professional)

SANS / GIAC: GPCS (Public Cloud Security), GCLD (Cloud Security Essentials), GCSA (Cloud Security Automation), GCFR (Cloud Forensics Responder), GDSA (Defensible Security Architecture), GCPN (Cloud Penetration Tester)

AWS Certified Security Specialty

Google Professional Cloud Security Engineer

Annual Base Salary Range: $170,000 - $205,000 + bonus.

#LI-TF1

We care deeply about the warm, inclusive environment we’ve created and we value diversity – we welcome applications from those typically underrepresented in tech. If you like the sound of this role but are not totally sure whether you’re the right person, do apply anyway!

About Snyk

Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.

Benefits & Programs

Prioritize health, wellness, financial security, and life balance with programs tailored to your location and role.

Flexible working hours, work-from home allowances, in-office perks, and time off for learning and self development

Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers

Health benefits, employee assistance plans, and annual wellness allowance

Country-specific life insurance, disability benefits, and retirement/pension programs, plus mobile phone and education allowances