AI-Driven Cloud Security Engineer, Platform

Snyk Ltd.; Boston, Northern (MA, KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Snyk is seeking a Senior Product Security Engineer (Platform) to bridge cloud security with AI-driven code fixes. You will collaborate with platform teams to implement Terraform, Kubernetes, and CI/CD changes, ensuring secure-by-default options for the engineers building Snyk's platform.

You'll work across GCP and AWS, focusing on IAM, Kubernetes hardening, and secure container pipelines, while enabling AI agents to operate safely and at scale.

Qualifications

• 5-8 years running or securing cloud infrastructure, ideally production platforms on GCP/AWS.
• Deep GCP security services knowledge with working AWS familiarity.
• Strong GCP IAM understanding: hierarchy, roles, service accounts, federation.
• Practical Kubernetes and container security on GKE; EKS welcome.

Responsibilities

• Threat model Snyk's cloud infra across GCP/AWS and negotiate changes with owning teams.
• Use AI agents to draft Terraform/Kubernetes/pipeline fixes and submit for merge.
• Run agent-driven fixes at scale with scoped changes for review.
• Write and maintain guidance AI agents rely on to meet standards.
• Connect agents to live cloud data via MCP, CLI tools, and provider APIs.
• Critically review AI-generated changes for unsafe defaults and over-broad IAM.
• Harden IAM across GCP and AWS and ensure least privilege.
• Improve Kubernetes security and secure container pipelines.

Skills

Cloud security

GCP knowledge

AWS knowledge

IAM expertise

Kubernetes security

Terraform

CI/CD

DevSecOps

Threat modeling

AI coding agents

Tools

Terraform

Kubernetes

Artifact Registry

Binary Authorization

Job description

Snyk is seeking a Senior Product Security Engineer (Platform) to bridge cloud security with AI-driven code fixes. You will collaborate with platform teams to implement Terraform, Kubernetes, and CI/CD changes, ensuring secure-by-default options for the engineers building Snyk's platform.

You'll work across GCP and AWS, focusing on IAM, Kubernetes hardening, and secure container pipelines, while enabling AI agents to operate safely and at scale.