{"id":2493474,"url":"https://alion.io/job/snyk-senior-product-security-engineer-2","title":"Senior Product Security Engineer","company":{"id":11819,"name":"Snyk","domain":"snyk.io","url":"https://alion.io/company/snyk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boston, United States","Ottawa, Canada"],"countries":["US","CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":192000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Snyk","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Least Privilege","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Shift-Left Security","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-09-30T19:08:51Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-29T01:07:55Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Unleash AI Innovators, Securely\nSoftware is being rewritten in real time. AI agents are starting to write more code than humans do, at a speed no security team has ever had to match, and that single shift is opening up the biggest opportunity our industry has seen in a decade. We're not bracing for it, we're building the company that owns it.\nSnyk is building the next generation security platform where security isn't a set of tools people operate. It's a team of security agents working alongside your engineers, finding, fixing, and governing risk at the speed software is now built. These agents work alongside both the company build and the agents they adopt. Security stops being a queue of work waiting for people, and becomes a coordinated workforce companies direct and trust.\nJob Summary\nSnyk's Product Security team works consultatively with the engineering teams that build and run our cloud platform: we identify the security requirements, agree together on what needs to change, and the owning teams implement it. As a Senior Product Security Engineer (Platform), you'll pair deep GCP and AWS infrastructure experience with AI coding agents to turn threat models into concrete Terraform, Kubernetes, and pipeline fixes, then work directly with platform teams to get those fixes merged. The goal is simple to state and hard to do well: make the secure option the easy option for the engineers building Snyk's platform.\nAbout the Team\nYou'll join Snyk's Product Security team, which operates as an advisor rather than an owner: the cloud infrastructure teams retain ownership and operation of their systems, and Product Security's job is to find what needs to change and make that change easy to ship. The team sits close to Snyk's platform and infrastructure organization and is increasingly built around AI agents doing real infrastructure work, not just reviewing someone else's.\nWhat You’ll Do\nThreat model Snyk's cloud infrastructure across GCP and AWS to identify the security requirements platform teams need to meet, then negotiate the resulting changes directly with the teams that own the systems.\n\nUse AI coding agents (for example Claude Code) to draft the Terraform, Kubernetes, and pipeline changes that fix identified security gaps, and raise them for the owning team to review and merge.\n\nRun agent-driven fixes at scale across many repositories, scoping every change so the owning platform team can review and merge it with confidence.\n\nWrite and maintain the guidance AI agents rely on (skills, prompts, instruction files, security baselines) so agent output consistently matches Snyk's standards.\n\nConnect agents to live cloud, CSPM, and ticketing data through MCP servers, command-line tools, and provider APIs so their fixes are grounded in the real environment.\n\nReview AI-generated infrastructure changes critically: catch invented resources, unsafe defaults, and IAM permissions scoped wider than they need to be.\n\nHarden GCP identity and access management, including the resource hierarchy, IAM roles and conditions, service accounts and workload identity federation, and organization policy constraints, plus the AWS IAM equivalent.\n\nImprove Kubernetes and container security, primarily on GKE: cluster hardening (private clusters, Autopilot), RBAC, admission control, workload identity, network policy, and secure container image pipelines (Artifact Registry, Binary Authorization).\n\nAdd automated security testing and CSPM tooling to CI/CD and GitOps pipelines, then help teams triage and fix what those tools surface.\n\nBenchmark infrastructure against secure configuration baselines such as the CIS Google Cloud Foundation Benchmark, and against the infrastructure controls in frameworks like ISO 27001 and NIST 800-53.\n\nLimit the risks AI agents themselves introduce: prompt injection, over-broad permissions, leaked secrets, and changes made without review.\n\nMeasure whether agent-driven fixing is actually working across teams, and improve the approach as you learn what does and doesn't land.\n\nWhat you’ll bring\n5-8 years running or securing cloud infrastructure, ideally having built and operated production platforms on GCP or AWS before moving into security.\n\nDeep, hands-on GCP knowledge, including its security services, plus a good working knowledge of AWS; equivalent AWS IAM depth is a bonus.\n\nStrong grasp of GCP IAM: resource hierarchy (organization, folders, projects), IAM roles and conditions, service accounts and workload identity federation, organization policy constraints, and least privilege design.\n\nPractical Kubernetes and container experience, primarily GKE: cluster hardening (private clusters, Autopilot), RBAC, admission control, workload identity, network policy, and secure container images. EKS experience is also welcome.\n\nComfort with infrastructure as code (for example Terraform) and automated deployment: CI/CD pipelines and GitOps.\n\nSolid DevSecOps practice: threat modeling, early shift-left testing, and continuous monitoring, plus the judgment to turn that into concrete infrastructure changes.\n\nConfidence using AI coding agents (for example Claude Code) day to day, including writing the guidance and prompts that keep their output reliable at scale.\n\nA critical eye for AI-generated infrastructure output: able to spot invented resources, unsafe defaults, and overly broad IAM permissions before anything ships.\n\nComfort working consultatively: influencing and negotiating changes with teams who own and run the infrastructure, rather than owning it yourself.\n\nNice to have: application security knowledge (for example code review, OWASP Top 10), or experience with Snyk's products or similar security testing tools.\n\nAbout Snyk\nSnyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.\nEqual Employment Opportunity\nSnyk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.","description_format":"text","description_chars":6406,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-14T03:54:28Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":147500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.89,"p_room":0.9,"age_days":27,"expected_fill_days":50,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/snyk-senior-product-security-engineer-2","json_url":"https://alion.io/job/snyk-senior-product-security-engineer-2.json","meta":{"generated_at":"2026-10-29T02:16:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3429,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11819},"rest":"https://alion.io/mcp/rest/get_company?id=11819"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsnyk-senior-product-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsnyk-senior-product-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsnyk-senior-product-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/snyk-senior-product-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsnyk-senior-product-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2493474}},{"tool":"search_jobs","arguments":{"company":"snyk.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2493474},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}