Manager of Security Engineering (Production Security)

SNAP, Inc.; Santa Monica (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Up to 28 weeks of parental leave and N

Adoption, surrogacy, infertility, and

Backup child care coverage, center‑bas

Dependent Daycare Flexible Spending

Services to support your path toparent

Lactation rooms (based on office) and乳

Job summary

Snap Inc. is seeking a Security Engineering Manager to lead the Production Security team and own the security of Snapchat's infrastructure. You will harden production environments across AWS and Google Cloud, build the perimeter, workload identity, and deployment controls used by thousands of services.

This builder’s role combines leadership with hands-on technical direction as you set a multi-year security strategy and drive risk-based roadmaps for secure, reliable systems.

Qualifications

• Leadership experience in security for production environments.
• Strong background in secure cloud architectures across AWS and GCP.
• Hands-on experience with cloud security, workload identity, and CI/CD security.

Responsibilities

• Lead production security for Snapchat infrastructure and security services.
• Drive multi-year security strategy across network perimeter, cloud hardening, and workload identity.
• Manage incident response, threat triage, and vulnerability remediation for production environments.
• Partner with cross-functional teams to embed security controls by default.

Skills

Security engineering

Leadership

Go

Python

Java

Cloud security

AWS

GCP

Kubernetes

CI/CD security

Education

Bachelor's degree in CS/Engineering or related field

Master's degree or PhD (preferred)

Tools

AWS

GCP

Kubernetes

Istio

Envoy

OpenID Connect

OAuth2

mTLS

Job description

• Snap Security teams protect the trust and safety of our global community by securing the systems and data that power Snapchat
• We safeguard hundreds of millions of Snapchatters every day, ensuring that every product and service is built on a foundation of security and resilience
• Our values guide everything we do - from how we anticipate and mitigate threats to how we collaborate across Snap
• We move fast, with precision, and always execute with privacy at the forefront
• We’re looking for a Security Engineering Manager to lead our Production Security team at Snap Inc!
• As the leader of the team, you will own the security of the infrastructure that runs Snapchat
• Your team hardens Snap’s production environment across AWS and Google Cloud, builds the perimeter, workload identity, and deployment controls that thousands of services depend on, and makes the secure path the easiest path for Snap developers
• This is a builder’s role as much as a leadership one
• You will set technical direction for a portfolio of security services used company-wide, and you will be accountable for both their engineering quality and their day-to-day operation
• Set and drive a multi-year technical strategy for securing Snap’s production infrastructure across network perimeter, cloud organization hardening, machine credentials and workload identity, and CI/CD
• Translate production risk into a prioritized roadmap, making judicious tradeoffs between near-term asks, long-term security outcomes, team productivity, and system health
• Ensure the platforms your team builds and operates, from perimeter and cloud configuration enforcement to service identity and secrets management, consistently demonstrate high technical quality, reliability, and operational excellence
• Balance a substantial operational load against planned initiatives, owning service reliability, on-call health, and the customer support model for a portfolio of production security services and developer-facing libraries, and participate directly in incident response for production environments
• Drive identification, triage, and remediation of vulnerabilities and misconfigurations across cloud environments and backend systems, holding clear ownership and timelines rather than accumulating open findings
• Oversee security reviews of platforms, backend services, and business application integrations, and set a review model that produces measurable risk reduction while unblocking engineering teams. This includes managing exception handling and formal risk acceptance when a control cannot be met
• Partner closely with Infrastructure, Developer Productivity, and Product Engineering to embed security controls inside Snap’s service abstractions so that teams inherit security by default instead of adopting it by exception
• Influence the secure and responsible adoption of LLMs, AI tooling, and agentic workloads across Snap’s engineering ecosystem, with a focus on identity, access boundaries, and data protection
• Partner with Detection and Response, Offensive Security, and infrastructure teams during incidents and red team engagements to drive containment and durable fixes rather than one-off patches
• Align your team’s direction with the strategic goals of the organization, and participate in quarterly and annual planning so investment lands on the highest impact risks
• Recruit high caliber engineers and build an engaging, collaborative, and productive team that positively influences the security culture of the broader organization
• Invest in your team members’ career growth, use effective performance management tools, and build mechanisms that delegate execution while holding a high bar

Benefits

• Up to 28 weeks of parental leave and return-to-work program
• Adoption, surrogacy, infertility, and fertility preservation benefits
• Backup child care coverage, center-based care support, & caregiver assistance
• Dependent Daycare Flexible Spending Account
• Services to support your path to parenthood & beyond - fertility support & family planning via Carrot, SNOO, Hinge Health
• Lactation rooms (based on office location) and breastmilk shipping coverage
• For Snap, employees taking care of loved ones with complex, chronic, or ongoing care needs (i.e. parent with Dementia, spouse with Cancer, child with Autism), your family can save time, money, & stress with Wellthy
• Short-term disability, long-term disability, basic life insurance, and AD&D insurance
• Comprehensive medical coverage, including PPO, HDHP with HSA, and HMO options
• Dental coverage, including orthodontia benefits
• Vision coverage, including frame and contact allowance and LASIK benefits
• Free membership to One Medical for primary and urgent healthcare services
• Business Travel Insurance
• Gym perks and discounts
• Team fitness classes and races
• Sports leagues
• Cooking and nutritional workshops
• Well-being reimbursement
• Unlimited access to virtual physical therapy with Anthem
• 15 sessions per year of mental health for you + dependents through Lyra
• Generous time off and leave programs. In the US, this includes the following:
• Up to 3 weeks (120 hours) of vacation time and 1 floating holiday for non-exempt team members
• 15 sick and safe days per year
• 12 paid holidays per year
• Social gatherings, team outings, and volunteering programs
• Meditation and yoga classes
• Speaker series, classes, and subscriptions to educational programs
• Snap Inc. provides a 401(k) plan that allows you to save on a pre-tax, Roth, and after-tax basis for your retirement (yes, we even have the Mega backdoor option!) Snap will also match 100% up to 3% of your contribution and then 50% on your 4th and 5th%
• Flexible Spending Accounts for healthcare, daycare and commuter
• Health Savings Account with employer contributions
• Rocket Lawyer memberships
• Financial education programs
• Snap exclusive discounts and perks
• Compensation packages that let you share in Snap’s long-term success!

Development skills in Go, Python, and/or Java, enough to review designs, assess technical quality, and stay credible with your engineersAbility to apply defense in depth and zero-trust principles to a large, heterogeneous production environment, and to sequence controls so that adoption succeeds at scaleHands-on experience deploying and securing services in multi-cloud environments, particularly AWS and Google Cloud PlatformWorking knowledge of authentication and authorization protocols and frameworks, including OpenID Connect, OAuth, mTLS, and identity federationProven experience in one or more production and infrastructure security areas: cloud security architecture, network perimeter and zero-trust design, workload identity and secrets management, container and Kubernetes security, or CI/CD and software supply chain securityStrong verbal and written communication skills, and the ability to influence senior engineering leaders without direct authorityDeep understanding of one or more infrastructure domains: Kubernetes, containers, service mesh technologies such as Istio or Envoy, networking, or Linux internals1+ year(s) of experience as an Engineering ManagerBachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field8+ years of post-bachelor’s industry experience; or a Master’s degree in a technical field + 7+ years of post-grad security experience; or a PhD in a related technical field + 4+ years of post-grad security experienceExperience leading teams that both build and operate platform services at scale, including accountability for SLAs, on-call, and migration of large internal customer basesTrack record driving company-wide adoption of a security control or platform, including the partner management and change management required to get thereFamiliarity with cloud security posture management platforms and native AWS and GCP security services