Software Engineer (Device Security)

SNAP, Inc.; San Diego (CA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Parental leave

Medical coverage

Dental coverage

Vision coverage

401(k) plan

Wellbeing programs

Job summary

Snap Inc. is seeking a Software Engineer for the Specs Security team in San Diego to design, build, and harden on-device security systems across OS, firmware, and apps.

You will implement permission, access control, sandboxing, and trusted execution boundaries, while enabling secure AI features and data handling. You will also advance fuzzing infrastructure, automated testing, and continuous validation pipelines to strengthen the security posture of Specs on device surfaces and cloud-connected

Qualifications

• Security analysis, threat modeling, vulnerability assessment, and automated security validation across OS, firmware, and AI/ML surfaces.
• Knowledge of permission systems, access control, sandboxing, and trusted execution boundaries.
• 5+ years building security features for Linux-based, embedded, or mobile systems.
• Experience with C, C++, or Rust for production software.

Responsibilities

• Design, build, and harden on-device security systems for Specs, including permissions and secure IPC.
• Develop security and privacy controls for on-device AI features and data handling.
• Research and implement security features for Snap OS, firmware, apps, and device surfaces.
• Improve fuzzing infrastructure, automated security testing, and validation pipelines.

Skills

Security analysis

Threat modeling

Vulnerability assessment

Secure code review

Fuzzing

Static analysis

Dynamic analysis

On-device AI security

Cryptography

C/C++/Rust

Education

Bachelor’s degree in CS/CE/EE

Master’s degree or PhD

Job description

• We’re looking for a Software Engineer to join the Specs Security team at Snap Inc!
• Design, build, and harden on-device security systems for Specs, including permissions, access control, secure IPC, sandboxing, and trusted execution boundaries
• Develop security and privacy controls for on-device AI features, including model integrity, sensitive data handling, inference-time privacy protections, local policy enforcement, and secure access to sensors, user data, and system capabilities
• Research, design, and implement security features that improve the security posture of Specs across Snap OS, firmware, applications, system services, and cloud-connected device surfaces
• Improve fuzzing infrastructure, automated security testing, and continuous validation pipelines for OS components, IPC mechanisms, parsers, services, drivers, firmware interfaces, and AI-related data flows

Benefits

• Up to 28 weeks of parental leave and return-to-work program
• Adoption, surrogacy, infertility, and fertility preservation benefits
• Backup child care coverage, center-based care support, & caregiver assistance
• Dependent Daycare Flexible Spending Account
• Short-term disability, long-term disability, basic life insurance, and AD&D insurance
• Lactation rooms (based on office location) and breastmilk shipping coverage
• For Snap, employees taking care of loved ones with complex, chronic, or ongoing care needs (i.e. parent with Dementia, spouse with Cancer, child with Autism), your family can save time, money, & stress with Wellthy
• Services to support your path to parenthood & beyond - fertility support & family planning via Carrot, SNOO, Hinge Health
• Comprehensive medical coverage, including PPO, HDHP with HSA, and HMO options
• Dental coverage, including orthodontia benefits
• Vision coverage, including frame and contact allowance and LASIK benefits
• Free membership to One Medical for primary and urgent healthcare services
• Business Travel Insurance
• Gym perks and discounts
• Team fitness classes and races
• Sports leagues
• Cooking and nutritional workshops
• Well-being reimbursement
• Unlimited access to virtual physical therapy with Anthem
• 15 sessions per year of mental health for you + dependents through Lyra
• Generous time off and leave programs. In the US, this includes the following:
• Up to 3 weeks (120 hours) of vacation time and 1 floating holiday for non-exempt team members
• 12 paid holidays per year
• 15 sick and safe days per year
• Speaker series, classes, and subscriptions to educational programs
• Meditation and yoga classes
• Social gatherings, team outings, and volunteering programs
• Snap Inc. provides a 401(k) plan that allows you to save on a pre-tax, Roth, and after-tax basis for your retirement (yes, we even have the Mega backdoor option!) Snap will also match 100% up to 3% of your contribution and then 50% on your 4th and 5th%
• Flexible Spending Accounts for healthcare, daycare and commuter
• Health Savings Account with employer contributions
• Rocket Lawyer memberships
• Financial education programs
• Snap exclusive discounts and perks
• Compensation packages that let you share in Snap’s long-term success!

Technical Skills and Experience

• Ability to perform security analysis, threat modeling, vulnerability assessment, secure code review, fuzzing, static analysis, dynamic analysis, and automated security validation across OS, firmware and AI/ML system boundaries.
• Develop security and privacy controls for on-device AI features, including model integrity, sensitive data handling, inference-time privacy protections, and local policy enforcement.
• Knowledge of permission systems, access control, least-privilege design, sandboxing, secure IPC, service isolation, and privacy-preserving access to sensors, user data, and system capabilities.
• Knowledge of Linux-based system security, embedded operating systems, trusted execution boundaries, secure software architecture, applied cryptography, authentication, authorization, attestation, key management, and platform hardening techniques.
• 2+ years of experience building security, privacy, or platform protection features for Linux-based, embedded, mobile, wearable, or connected device systems.
• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, a related technical field, or equivalent practical experience.
• Experience with applied cryptography, authentication, authorization, secure communications, key management, threat modeling, vulnerability assessment, or system security for embedded or Linux-based systems.
• Master’s degree or PhD in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline.
• 5+ years of experience developing production software in one or more programming languages such as C, C++, Rust.
• Experience designing or building on-device permission systems, access control frameworks, sandboxing, secure IPC, service isolation, least-privilege architectures, or privacy-preserving controls for sensor-rich devices.
• Experience securing on-device AI, ML, or assistant-like systems, including model integrity, sensitive data handling, inference-time privacy, AI feature permissions, local policy enforcement, and protection of model inputs and outputs.
• Experience with trusted execution technologies, secure manufacturing, device provisioning, attestation, anti-rollback, secure debug, lifecycle state management, fuzzing, automated security validation, or platform-level vulnerability hardening for Linux-based systems.