Senior Cloud Security Engineer — AI-Driven Platform

Snyk Ltd.; Boston (MA); On-site; USD 192,000 - 230,000; Full time

Benefits offered by this job

Health benefits

Flexible working hours

Work-from-home allowances

Parental leave

Wellness allowance

Job summary

Snyk Ltd. is seeking a Senior Product Security Engineer (Platform) to combine deep GCP/AWS infrastructure expertise with AI coding agents. You will translate threat models into concrete Terraform, Kubernetes, and pipeline fixes, collaborating with platform teams to ensure changes are merged safely.

The role emphasizes hardening GCP and AWS IAM, Kubernetes security, and secure container pipelines, while guiding AI agents to deliver reliable, auditable infrastructure updates.

Qualifications

• 5–8 years running or securing cloud infrastructure
• Deep GCP knowledge, plus working AWS knowledge
• Kubernetes and container security experience (GKE focus)
• Infrastructure as code with Terraform and automated deployment
• DevSecOps mindset with threat modeling and shift-left testing
• Ability to write guidance and prompts for AI coding agents
• Comfort negotiating changes with owning teams and influencing outcomes
• Nice to have: application security knowledge or familiarity with Snyk products

Responsibilities

• Threat model Snyk's cloud infrastructure across GCP and AWS.
• Use AI coding agents to draft Terraform, Kubernetes, and pipeline changes.
• Run agent-driven fixes at scale across repositories.
• Write and maintain guidance AI relies on.
• Connect agents to live cloud and CSPM data for grounded fixes.
• Review AI-generated infrastructure changes for safety and scope.

Skills

Threat modeling

DevSecOps

Influencing teams

Security architecture

Cloud security

Education

Bachelor's degree in CS or related field

Tools

Terraform

Kubernetes

CI/CD pipelines

GitOps

Cloud provider tooling

Job description

Snyk Ltd. is seeking a Senior Product Security Engineer (Platform) to combine deep GCP/AWS infrastructure expertise with AI coding agents. You will translate threat models into concrete Terraform, Kubernetes, and pipeline fixes, collaborating with platform teams to ensure changes are merged safely.

The role emphasizes hardening GCP and AWS IAM, Kubernetes security, and secure container pipelines, while guiding AI agents to deliver reliable, auditable infrastructure updates.