Senior Product Security Engineer

📋 Description

• Threat model Snyk's cloud infrastructure across GCP and AWS to identify the security requirements
• Use AI coding agents (for example Claude Code) to draft the Terraform, Kubernetes, and pipeline
• Run agent-driven fixes at scale across many repositories, scoping every change so the owning
• Write and maintain the guidance AI agents rely on (skills, prompts, instruction files, security
• Connect agents to live cloud, CSPM, and ticketing data through MCP servers, command-line tools, and
• Review AI-generated infrastructure changes critically: catch invented resources, unsafe defaults

🎯 Requirements

• 5-8 years running or securing cloud infrastructure, ideally having built and operated production
• Deep, hands-on GCP knowledge, including its security services, plus a good working knowledge of
• Strong grasp of GCP IAM: resource hierarchy (organization, folders, projects), IAM roles and
• Practical Kubernetes and container experience, primarily GKE: cluster hardening (private clusters
• Comfort with infrastructure as code (for example Terraform) and automated deployment: CI/CD
• Solid DevSecOps practice: threat modeling, early shift-left testing, and continuous monitoring

🎁 Benefits

• Snyk is committed to creating an inclusive and engaging environment where our employees can thrive
• Snyk is an Equal Opportunity Employer. All qualified applicants will receive consideration for