Senior Offensive Security Engineer

SNAP, Inc.; Palo Alto (CA); On-site; USD 209,000 - 313,000; Full time

Benefits offered by this job

Equity RSUs

Job summary

Snap Inc. is hiring a Security Engineer to join our Offensive Security Team in California.

You will design, lead, and execute offensive security engagements across cloud, internal and mobile applications, while maintaining threat intel awareness and delivering actionable post-engagement reports. Minimum qualifications include a BS in a technical field and 6+ years of security experience, with advanced degrees offering alternative pathways.

Qualifications

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
• You may also provide evidence of personal security research (CVEs or blogs), public bug bounty reports, previous CTF participation, and/or code repositories on GitHub showcasing personally developed security tools
• 6+ years of post-Bachelor’s security related experience; or Master’s degree in a technical field + 5+ year of post-grad security related experience; or PhD in a relevant technical field + 2+ years of post-grad security related experience

Responsibilities

• Design, execute, and lead offensive security and privacy engagements, including red, purple, and orange team exercises, across corporate environments, cloud projects/accounts, internal applications, and mobile client applications.
• Maintain a comprehensive understanding of real-world threat actors, their tools, tactics, and procedures, with a propensity to target Snap, collaborating extensively with the threat intelligence team to enumerate exhaustive killchains that seed and prioritize the future engagement roadmap.
• Deliver detailed post-engagement reports that identify vulnerabilities, highlight strengths and weaknesses in our security posture, assess detection coverage, and provide actionable recommendations, including prioritized risk mitigation strategies and improvements to defensive measures.
• Implement and manage offensive security engagement infrastructure and tooling to conduct covert operations and mimic the tactics of relevant adversaries, including the development of custom implants, payloads, and exploits to thoroughly test and evaluate our defenses.
• Collaborate closely with other security and privacy teams to share insights from engagements, informing strategic roadmaps by identifying priority areas for improvement and aligning on initiatives.
• Serve as a subject matter expert and consultant to other security and privacy teams, participating in security reviews, reproducing vulnerabilities, and contributing to high-stakes incident response efforts.
• Explore novel research topics relevant to our tech stack to proactively improve our security posture and integrate lessons learned into future exercises.

Skills

Offensive security

Team leadership

Kubernetes

Cloud AWS/GCP

Python/Java/Go

Threat modeling

Bash/PowerShell

Education

Bachelor's degree in Computer Science or related field

Job description

Snap Inc. is hiring a Security Engineer to join our Offensive Security Team in California.

You will design, lead, and execute offensive security engagements across cloud, internal and mobile applications, while maintaining threat intel awareness and delivering actionable post-engagement reports. Minimum qualifications include a BS in a technical field and 6+ years of security experience, with advanced degrees offering alternative pathways.