Security Engineer (Production Security)

Join Snap Inc. as a Senior Security Engineer in the Infrastructure Security team. You will design, architect, and implement security controls for Snap's backend services and cloud infrastructure. You will conduct in-depth security reviews, identify vulnerabilities, and drive remediation efforts. You will also implement security into CI/CD pipelines and partner with cross-functional teams to embed secure design practices early in the development lifecycle. Additionally, you will mentor junior engineers and champion security and user privacy across Snap's technology ecosystem.

• Design, architect, and implement security controls and frameworks for securing Snap's backend services and cloud infrastructure.
• Conduct in-depth security reviews of platforms, back-end services, and business application integrations; identify, triage, and drive remediation of vulnerabilities.
• Partner cross-functionally with Infrastructure, Developer Productivity, and Product Engineering teams to embed secure design practices early in the development lifecycle.

• Hands-on experience deploying and securing services in multi-cloud environments, particularly AWS and Google Cloud Platform
• Solid development skills in at least one of the following languages: Go, Python and/or Java
• Familiarity with cloud security tools such as Cloud Security Posture Management (CSPM) platforms and native AWS/GCP security services
• Deep understanding of one or more infrastructure domains and technologies: Kubernetes, Containers, Service Mesh (e.g., Istio, Envoy), Networking and/or Linux internals
• Knowledge and experience working with authentication and authorization protocols/frameworks (OpenID Connect, OAuth, or Identity Federation)
• Strong communication skills and the ability to collaborate effectively across engineering and product teams
• BS/BA degree in a technical field such as Computer Science or equivalent years of experience
• Experience with Java, C++, and/or Python
• 6+ years of post-Bachelor’s industry experience; or Master’s degree in a technical field + 5+ year of post-grad security experience; or PhD in a relevant technical field + 2+ years of post-grad security experience