Senior Cloud Security Engineer — AI-Driven Platform

Snyk Ltd.; Ottawa; Presencial; CAD 273.000 - 341.000; Jornada completa

Descripción de la vacante

Snyk is hiring a Senior Product Security Engineer (Platform) to pair deep GCP and AWS infrastructure security experience with AI coding agents. You will translate threat models into Terraform, Kubernetes, and pipeline fixes, then collaborate with platform teams to merge those changes.

The role focuses on making secure options the easy choice for engineers building Snyk's platform. You will harden IAM, improve Kubernetes security on GKE, integrate automated security testing into CI/CD, and

Formación

• Experience with threat modeling for cloud infrastructure and deriving concrete changes.
• Hands-on with GCP/AWS security services and IAM, RBAC, workload identity federation.
• Strong background in Kubernetes security, cluster hardening, network policies, and secure container images.

Responsabilidades

• Threat model Snyk's cloud infrastructure across GCP/AWS and negotiate changes with owning teams.
• Use AI coding agents to draft Terraform, Kubernetes, and pipeline changes for security gaps.
• Run agent-driven fixes at scale across repositories with controlled review and merge processes.
• Create and maintain guidance for AI agents (prompts, instructions, baselines) used across teams.
• Connect agents to live cloud data and CSPM tools to ground fixes in real environments.
• Critically review AI-generated infrastructure changes to avoid invented resources and overly broad IAM permissions.

Conocimientos

Threat modeling

Kubernetes security

Cloud security (GCP/AWS)

DevSecOps

AI tooling familiarity

Herramientas

Terraform

Kubernetes

CI/CD

GitOps

IAM

Descripción del empleo

Snyk is hiring a Senior Product Security Engineer (Platform) to pair deep GCP and AWS infrastructure security experience with AI coding agents. You will translate threat models into Terraform, Kubernetes, and pipeline fixes, then collaborate with platform teams to merge those changes.

The role focuses on making secure options the easy choice for engineers building Snyk's platform. You will harden IAM, improve Kubernetes security on GKE, integrate automated security testing into CI/CD, and