Senior Platform Security Engineer – AI & Cloud

Snyk; Boston (MA); On-site; USD 192,000 - 230,000; Full time

Benefits offered by this job

Flexible working hours

Work-from-home allowance

Vacation and wellness time off

Health benefits

Job summary

Snyk is seeking a Senior Product Security Engineer (Platform) to strengthen cloud security across GCP and AWS. You will pair infrastructure expertise with AI coding agents to translate threat models into Terraform, Kubernetes, and pipeline fixes, collaborating with platform teams to merge changes safely.

Ideal candidates have 5–8 years of hands-on cloud security experience, deep GCP knowledge, and practical Kubernetes.

Qualifications

• 5-8 years running or securing cloud infrastructure
• Deep, hands-on GCP knowledge, plus AWS familiarity
• Strong grasp of GCP IAM and workload identity federation
• Kubernetes and container experience on GKE (RBAC, network policy)
• Proficiency with infrastructure as code (Terraform) and CI/CD pipelines

Responsibilities

• Threat model cloud infrastructure across GCP and AWS
• Draft Terraform, Kubernetes, and pipeline changes using AI agents
• Run agent-driven fixes at scale with review by owning teams
• Write guidance and prompts for AI agents to ensure reliability
• Integrate AI agents with live cloud, CSPM data and ticketing systems
• Review AI-generated changes for safety and accuracy
• Harden IAM, including policies and service accounts
• Improve Kubernetes security on GKE including control planes and security pipelines
• Add automated security testing and CSPM tooling to CI/CD
• Benchmark against CIS and NIST frameworks
• Mitigate AI agent risks like prompt injection and over-broad permissions
• Measure impact across teams and iterate

Skills

GCP security

AWS security

Kubernetes

Terraform

CI/CD

DevSecOps

Threat modeling

IAM management

AI agents

Policy & governance

Tools

Claude Code

CI/CD tooling

Job description

Snyk is seeking a Senior Product Security Engineer (Platform) to strengthen cloud security across GCP and AWS. You will pair infrastructure expertise with AI coding agents to translate threat models into Terraform, Kubernetes, and pipeline fixes, collaborating with platform teams to merge changes safely.

Ideal candidates have 5–8 years of hands-on cloud security experience, deep GCP knowledge, and practical Kubernetes.