{"id":130381,"url":"https://alion.io/job/snorkel-ai-software-engineer-security","title":"Software Engineer — Security","company":{"id":48230,"name":"Snorkel AI","domain":"snorkel.ai","url":"https://alion.io/company/snorkel-ai","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":92,"open_postings":18,"ghost_share":0,"stale_share":0.111,"repost_share":0,"time_to_fill_p50_days":102,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":220000,"max":300000,"currency":"USD","period":"year","gross":null,"usd_annual":300000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Go","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Snorkel","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Azure","optional":true},{"name":"DLP","optional":true},{"name":"GCP","optional":true},{"name":"Red Teaming","optional":true},{"name":"SBOM","optional":true},{"name":"SIEM","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-08-20T20:52:13Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-18T06:47:47Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":58},"description":"About Snorkel\nSnorkel AI is the frontier AI data lab, helping teams build the data and environments behind high-performing frontier and agentic AI. We combine technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions for real-world AI systems. Founded out of the Stanford AI Lab in 2019, Snorkel works with leading AI labs and enterprises to move from better data to better outcomes. \nExcited to help us redefine how AI is built? Apply to be the newest Snorkeler!\nAbout the Role\nWe are seeking a Security Engineer to evolve Snorkel's security posture across our cloud infrastructure, developer platform, and product ecosystem. You will partner with the security lead to secure cloud environments, build security automation, guide cross-functional initiatives, and embed security into our engineering workflows.\nYou will work across infrastructure, platform, product, and application teams to ensure our systems scale securely and meet the bar required for modern, cloud-native, compliance-focused environments. This is a high-impact role where your ability to work effectively with others matters as much as your technical depth.\nKey Responsibilities\nBuild and scale Infrastructure as Code (IaC) governance strategies that embed security while enabling developer velocity\nOperate and tune Cloud Security Posture Management (CSPM) tooling and coordinate remediation through engineering teams\nInvestigate security events, triage incidents, identify root causes, and own remediation through resolution\nArchitect secure AWS cloud account structures - landing zones, multi-account patterns, network segmentation, and cross-account role strategies\nDesign and implement network security architectures using security groups, Network Access Control Lists (NACLs), subnetting, routing layers, and egress controls\nEstablish secure-by-default design patterns across Kubernetes and containerized workloads\nDesign, maintain, and govern Identity and Access Management (IAM) role & policy architectures for both human and machine identities\nImplement encryption everywhere - data-at-rest, data-in-transit, and key rotation using AWS Key Management Service (KMS) and related services\nConduct threat modeling, architecture reviews, and secure design assessments for new and existing systems\nAssess and secure AI/ML product architectures, including trust boundaries, API boundaries, and data flow through training and inference pipelines\nBuild secure automation through Python, AWS-native services, and policy-as-code frameworks\nOwn complex security projects end-to-end - from discovery and design docs to implementation, rollout, and long-term ownership\nAlign cloud security strategy with relevant frameworks (NIST CSF, ISO 27001, SOC 2, CIS benchmarks)\nProfessional Skills\nSecurity at a growing startup is not a solo effort. This role succeeds by making the entire organization more secure through the people and teams around you. These skills are not secondary to technical ability - they shape whether security work actually lands and delivers lasting impact.\nCommunication & Influence\nCommunicates security risks, trade-offs, and recommendations clearly to both technical and non-technical audiences\nWrites concise, structured technical documentation - design docs, runbooks, postmortems, and policy proposals that others can act on without follow-up clarification\nBuilds alignment on security priorities across teams without relying on positional authority - a small security team cannot mandate adoption; it must earn buy-in\nCross-Functional Partnership\nBuilds trust with engineering, product, and infrastructure teams by proposing solutions that balance security posture with developer velocity - security controls that teams resist or work around deliver zero impact\nDefaults to collaboration over enforcement - works with teams to find the right path forward rather than handing down requirements\nSeeks to understand the workflows, constraints, and incentives of partner teams before proposing changes - the best security solution is one the team will actually implement and maintain\nOwnership & Judgment\nComfortable with broad ownership, context-switching, and exercising judgment without a large support structure - this role requires self-direction, not delegation\nExercises sound judgment on when to push hard on a security requirement versus when to accept managed risk with compensating controls\nBalances thoroughness with pragmatism - delivers iterative security improvements that compound over time rather than waiting for perfect solutions that never ship\nManages multiple concurrent initiatives with clear ownership, status communication, and escalation when blocked\nTeaching & Growth\nMultiplies impact by making others better - equips engineers across the organization to build securely by default through training, code review feedback, and accessible documentation\nFrames security guidance as enablement rather than enforcement - helps teams understand the why behind requirements so they can make sound security choices on their own\nConsistently seeks feedback, stays current on evolving threats and technologies, and treats gaps in knowledge as opportunities - a coachable mindset and commitment to continuous learning are essential in a domain that changes constantly\nTechnical Skills & Experience\nThe skills below are grouped into what we consider foundational for this role and additional areas where you will contribute and grow. Depth across every area is not expected - we value solid fundamentals and the ability to learn.\nFoundational\nProgramming skills in Python, Go, or similar languages, with the ability to build security tooling and automation\nExperience building and operating systems at scale in cloud-native, containerized environments\nProficiency with Infrastructure as Code (Terraform): writing modules, CI/CD pipelines, deployment governance, and security reviews\nAWS cloud architecture: multi-account strategies, landing zones, environment isolation, and cross-account role design\n Identity and Access Management (IAM): role and policy architectures, least privilege, human and machine identity patterns\n Network security: security groups, Network Access Control Lists (NACLs), Virtual Private Cloud (VPC) design, subnet segmentation, routing layers, and egress controls\nAdditional Areas You'll Contribute To\nThreat modeling and secure design assessments for new and existing systems\nEncryption and key management: data-at-rest, data-in-transit, key rotation using AWS KMS, Secrets Manager, or HashiCorp Vault\n Container and OS hardening: secure base images, hardened Amazon Machine Images (AMIs), runtime protections\n Cloud Security Posture Management (CSPM) tooling - deployment, tuning, and coordinating remediation workflows through engineering teams\nSecurity event investigation: triage, root cause assessment, and remediation ownership\nVulnerability management lifecycle: scanning, prioritization, tracking, and closure\n AI/ML security: awareness of risks specific to AI/ML systems (prompt injection, data poisoning, model extraction, training data protection) and ability to assess trust boundaries in AI product architectures\nCompliance and security frameworks: NIST CSF, ISO 27001, SOC 2, CIS benchmarks\nDesigning secure architectures for high-growth SaaS or cloud-native environments\nPreferred Experience (Nice-to-Have)\n Secure development lifecycle (SDLC) practices: static analysis (SAST), software composition analysis (SCA), software bill of materials (SBOM) automation, secrets scanning, or bug bounty program management\n Incident response: digital forensics and incident response (DFIR), forensic investigation, or on-call security operations\n Detection engineering: Security Information and Event Management (SIEM) platforms, correlation rules, alert tuning, or Security Orchestration, Automation and Response (SOAR) playbooks\nOffensive security: penetration testing, red team exercises, or adversarial testing of AI systems\n Multi-cloud environments (GCP, Azure) in addition to AWS\nZero-trust architecture practices and secure workspace design\n Data loss prevention (DLP) strategies for protecting training data and customer data\nWhat You'll Impact\nYou will embed security from code to cloud - ensuring our systems, data, customer environments, and developer workflows operate securely at scale. This role carries broad influence, high ownership, and the opportunity to shape modern cloud security architecture across the organization.\nSnorkel is proud to be an Equal Employment Opportunity employer and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. Snorkel embraces diversity and provides equal employment opportunities to all employees and applicants for employment.\nActual compensation will be determined based on factors including skills, qualifications, experience, and geographic location.\nSalary range(s) for this role\n$220,000—$300,000 USD\nBe Your Best at Snorkel\nJoining Snorkel AI means becoming part of a company that has market proven solutions, robust funding, and is scaling rapidly-offering a unique combination of stability and the excitement of high growth. As a member of our team, you’ll have meaningful opportunities to shape priorities and initiatives, influence key strategic decisions, and directly impact our ongoing success. Whether you’re looking to deepen your technical expertise, explore leadership opportunities, or learn new skills across multiple functions, you’re fully supported in building your career in an environment designed for growth, learning, and shared success.\nSnorkel AI is proud to be an Equal Employment Opportunity employer and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. Snorkel AI embraces diversity and provides equal employment opportunities to all employees and applicants for employment. Snorkel AI prohibits discrimination and harassment of any type on the basis of race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law. All employment is decided on the basis of qualifications, performance, merit, and business need.\nWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.","description_format":"text","description_chars":10641,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Machine Learning","MLOps","AI Training Data & Annotation"],"lifecycle":[{"event":"open","at":"2026-08-20T20:52:13Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 21","filings_12m":21,"filings_prev_12m":15,"green_card_filings_12m":0,"median_offered_wage_usd":187500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":16}],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.844,"p_room":0.9,"age_days":57,"expected_fill_days":102,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":300000,"is_top_pay":true},"html_url":"https://alion.io/job/snorkel-ai-software-engineer-security","json_url":"https://alion.io/job/snorkel-ai-software-engineer-security.json","meta":{"generated_at":"2026-10-18T09:51:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14540,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48230},"rest":"https://alion.io/mcp/rest/get_company?id=48230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsnorkel-ai-software-engineer-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsnorkel-ai-software-engineer-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsnorkel-ai-software-engineer-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/snorkel-ai-software-engineer-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsnorkel-ai-software-engineer-security"}]}