Senior Product Security Engineer

Summary

Join Snyk, a developer security platform, as a Senior Product Security Engineer and help build a world-class Product Security function. You will build innovative solutions, collaborate with engineering teams to integrate security, perform threat modeling and code reviews, and engineer self-service security testing capabilities. This role requires 3+ years of experience in cross-functional engineering teams using DevOps/DevSecOps practices, strong communication skills, and familiarity with cloud native ecosystems and compliance frameworks. The ideal candidate will have experience in a Product Security/Application security team and knowledge of offensive security techniques. Snyk offers a supportive and inclusive environment with flexible working hours, generous time off, comprehensive health benefits, and various other perks.

Requirements

• 3+ years of experience working in cross-functional engineering teams following DevOps/DevSecOps practices
• The ability to articulate security as a business enabler
• Scripting/coding ability in at least one language
• Working knowledge of cloud native ecosystems (AWS, GCP)
• Experience writing solid test cases and documentation
• Familiarity with compliance frameworks (ISO 27001, NIST 800-53)
• Experience defining security standards and procedures
• Ability to work independently in a remote setting
• Strong written and verbal communication skills

Responsibilities

• Build innovative solutions that extend Snyk’s capabilities
• Work with architecture, product and engineering teams ensuring security is at the heart of what we do
• Collaborate with your peers to define security guardrails and templated secure-by-design architectural patterns
• Perform threat models and code reviews for products and services
• Engineer solutions that enable teams to self-serve on effective security testing capabilities leading to faster, safer code in production environments
• Build out best-in-breed continuous security monitoring capabilities

Preferred Qualifications

• Have previous experience working as a security engineer working in a Product Security/Application security team or as a Security Champion
• Practical knowledge of common threats and exposures to web apps and services
• Strong interest and experience in offensive security techniques
• Have experience with either Golang, Python, Scala, Rust, TypeScript
• Familiarity with data analysis/data science techniques

Benefits

• Flexible working hours, work-from home allowances, in-office perks, and time off for learning and self development
• Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers
• Health benefits, employee assistance plans, and annual wellness allowance
• Country-specific life insurance, disability benefits, and retirement/pension programs, plus mobile phone and education allowances