Security Engineer (Production Security)

SNAP, Inc.; Santa Monica (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Parental leave

Fertility & family benefits

401(k) with match

Health, Dental, Vision insurance

Well-being programs

Job summary

Snap Inc. is seeking a Senior Security Engineer to join the Infrastructure Security team. You will design and implement security controls for Snap’s backend services and cloud infrastructure, and drive remediation of vulnerabilities across multiple cloud environments.

You will champion secure design practices, mentor engineers, and influence the adoption of secure AI tooling across the engineering ecosystem, while partnering with cross-functional teams to raise security standards.

Qualifications

• Hands-on experience deploying and securing services in multi-cloud environments, particularly AWS and Google Cloud Platform.
• Solid development skills in Go, Python and/or Java.
• Familiarity with CSPM tools and native AWS/GCP security services.
• Deep understanding of Kubernetes, Containers, Service Mesh, Networking, Linux internals.
• Knowledge of authentication protocols (OpenID Connect, OAuth, Identity Federation).
• Strong communication skills and collaboration across engineering teams.
• BS/BA degree in a technical field; or equivalent experience; senior-level security background.

Responsibilities

• Design, architect, and implement security controls and frameworks for securing Snap’s backend services and cloud infrastructure
• Influence and improve a wide range of production security controls, including visibility, hardening, identity, authentication, networking, and deployments policies
• Conduct in-depth security reviews of platforms, back-end services, and business application integrations
• Identify, triage, and drive remediation of vulnerabilities and misconfigurations across cloud environments and backend systems
• Implement security into CI/CD pipelines
• Partner cross-functionally with Infrastructure, Developer Productivity, and Product Engineering teams to embed secure design practices early in the development lifecycle
• Influence the secure and responsible adoption of LLMs and AI tools across Snap’s engineering ecosystem
• Mentor and guide junior engineers, setting high standards of operational excellence and security engineering
• Champion security and user privacy across Snap’s technology ecosystem

Job description

• We’re looking for a Senior Security Engineer to join the Infrastructure Security team at Snap Inc!
• Design, architect, and implement security controls and frameworks for securing Snap’s backend services and cloud infrastructure
• Influence and improve a wide range of production security controls, including visibility, hardening, identity, authentication, networking, and deployments policies
• Conduct in-depth security reviews of platforms, back-end services, and business application integrations
• Identify, triage, and drive remediation of vulnerabilities and misconfigurations across cloud environments and backend systems
• Implement security into CI/CD pipelines
• Partner cross-functionally with Infrastructure, Developer Productivity, and Product Engineering teams to embed secure design practices early in the development lifecycle
• Influence the secure and responsible adoption of LLMs and AI tools across Snap’s engineering ecosystem
• Mentor and guide junior engineers, setting high standards of operational excellence and security engineering
• Champion security and user privacy across Snap’s technology ecosystem

Benefits

• Up to 28 weeks of parental leave and return-to-work program
• Adoption, surrogacy, infertility, and fertility preservation benefits
• Backup child care coverage, center-based care support, & caregiver assistance
• Dependent Daycare Flexible Spending Account
• Short-term disability, long-term disability, basic life insurance, and AD&D insurance
• Services to support your path to parenthood & beyond - fertility support & family planning via Carrot, SNOO, Hinge Health
• For Snap, employees taking care of loved ones with complex, chronic, or ongoing care needs (i.e. parent with Dementia, spouse with Cancer, child with Autism), your family can save time, money, & stress with Wellthy
• Lactation rooms (based on office location) and breastmilk shipping coverage
• Comprehensive medical coverage, including PPO, HDHP with HSA, and HMO options
• Dental coverage, including orthodontia benefits
• Vision coverage, including frame and contact allowance and LASIK benefits
• Free membership to One Medical for primary and urgent healthcare services
• Business Travel Insurance
• Gym perks and discounts
• Team fitness classes and races
• Sports leagues
• Cooking and nutritional workshops
• Well-being reimbursement
• Unlimited access to virtual physical therapy with Anthem
• 15 sessions per year of mental health for you + dependents through Lyra
• Generous time off and leave programs. In the US, this includes the following:
• Up to 3 weeks (120 hours) of vacation time and 1 floating holiday for non-exempt team members
• 15 sick and safe days per year
• 12 paid holidays per year
• Meditation and yoga classes
• Speaker series, classes, and subscriptions to educational programs
• Social gatherings, team outings, and volunteering programs
• Snap Inc. provides a 401(k) plan that allows you to save on a pre-tax, Roth, and after-tax basis for your retirement (yes, we even have the Mega backdoor option!) Snap will also match 100% up to 3% of your contribution and then 50% on your 4th and 5th%
• Flexible Spending Accounts for healthcare, daycare and commuter
• Health Savings Account with employer contributions
• Rocket Lawyer memberships
• Financial education programs
• Snap exclusive discounts and perks
• Compensation packages that let you share in Snap’s long-term success!

• Hands-on experience deploying and securing services in multi-cloud environments, particularly AWS and Google Cloud Platform
• Solid development skills in at least one of the following languages: Go, Python and/or Java
• Familiarity with cloud security tools such as Cloud Security Posture Management (CSPM) platforms and native AWS/GCP security services
• Deep understanding of one or more infrastructure domains and technologies: Kubernetes, Containers, Service Mesh (e.g., Istio, Envoy), Networking and/or Linux internals
• Knowledge and experience working with authentication and authorization protocols/frameworks (OpenID Connect, OAuth, or Identity Federation)
• Strong communication skills and the ability to collaborate effectively across engineering and product teams
• BS/BA degree in a technical field such as Computer Science or equivalent years of experience
• Experience with Java, C++, and/or Python6+ years of post-Bachelor’s industry experience; or Master’s degree in a technical field + 5+ year of post-grad security experience; or PhD in a relevant technical field + 2+ years of post-grad security experience