Senior Security Engineer

Our Opportunity: 

Snyk is seeking an experienced Senior Security Engineer to join our Enterprise Security team. In this cross-functional role, you will spearhead adversary emulation and attack simulation (red teaming) initiatives to proactively identify gaps in our detection and response capabilities across the Snyk environment. While leading our offensive security testing, you will also be instrumental in enhancing our enterprise threat detection systems, actively participating in security incident response, and driving improvements in detection engineering.

This position is ideal for a security professional who excels at adopting an attacker's mindset while possessing a deep understanding of building and scaling robust defenses. As Snyk undergoes rapid growth, you'll have a unique opportunity to help build, shape, and mature the technical foundations of our security operations and overall infosec program from an early, impactful stage.

You’ll Spend Your Time:

• Design, plan, and execute threat emulation exercises, including covert campaigns that simulate adversarial threats.
• Develop and utilize custom tools, scripts, and exploits to simulate targeted attacks against critical infrastructure, applications, and personnel.
• Collaborating with security architecture, IT, engineering, and infrastructure teams to drive remediation efforts.
• Developing signatures used to detect observed and new threats in a cloud-first environment. 
• Delivering detection and response capabilities across corporate and cloud assets.
• Analyzing logs and other forensic artifacts from multiple sources (host, network, memory).
• Developing and refining signatures used to detect observed and new threats.
• Collaborating with teams across the company on projects designed to improve our overall security posture.

What You’ll Need:

• Theoretical and practical knowledge of threat hunting in a cloud environment.
• Excellent technical cybersecurity and engineering/development skills, with experience in using REST APIs to integrate disparate security technologies.
• Experience responding to, leading, and remediating security incidents. 
• Strong understanding of cloud computing (AWS, GCP, or Azure).
• Strong scripting and automation skills (Python, Bash, Go, Rust).
• Knowledge of host-based analysis on Mac OS and Linux operating systems. 
• Use case development/content development within a SIEM. 
• Experience evaluating and deploying cybersecurity solutions in a public cloud environment (IaaS, PaaS, SaaS). 
• Information security certifications (OSCP, OSEP, GPEN, GCIH, GCFA, GNFA, GREM, etc.) 
• Experience with Bash, Python, and Go. 
• Familiarity with data analysis / data science techniques for threat detection. 
• Bachelor’s degree in computer science, information security, or Information Technology. 

We’d be Lucky if You: 

• Have worked within the DevSecOps Industry.

#LI-TF1