Software Engineer - Security

Responsibilities

• Build and govern Infrastructure as Code security strategies and developer security workflows.
• Operate and tune Cloud Security Posture Management tooling and coordinate remediation with engineering teams.
• Investigate security events, triage incidents, identify root causes, and own remediation through resolution.
• Architect AWS cloud account structures, landing zones, multi-account patterns, network segmentation, and cross-account access.
• Design network security architectures using security groups, NACLs, subnetting, routing layers, and egress controls.
• Establish secure-by-default patterns for Kubernetes and containerized workloads.
• Design and govern IAM roles and policies for human and machine identities.
• Implement encryption, key rotation, threat modeling, architecture reviews, and secure design assessments.
• Assess security risks and trust boundaries across AI/ML product architectures and data pipelines.
• Build security automation with Python, AWS-native services, and policy-as-code frameworks.
• Own security projects end-to-end from discovery and design through implementation, rollout, and ongoing ownership.
• Align cloud security practices with NIST CSF, ISO 27001, SOC 2, and CIS benchmarks.

Requirements

• Programming skills in Python, Go, or similar languages for security tooling and automation.
• Experience building and operating systems at scale in cloud-native, containerized environments.
• Proficiency with Terraform, including modules, CI/CD pipelines, deployment governance, and security reviews.
• Experience with AWS cloud architecture, multi-account strategies, landing zones, environment isolation, and cross-account role design.
• Experience designing IAM role and policy architectures using least-privilege principles for human and machine identities.
• Experience with network security, including security groups, NACLs, VPC design, subnet segmentation, routing, and egress controls.
• Knowledge of threat modeling, secure design assessments, encryption, key management, container and OS hardening, vulnerability management, and CSPM tooling.
• Awareness of AI/ML security risks such as prompt injection, data poisoning, model extraction, and training data protection.
• Preferred experience with secure development lifecycle practices, SAST, SCA, SBOM automation, secrets scanning, bug bounty programs, DFIR, SIEM, SOAR, penetration testing, red-team exercises, GCP, Azure, zero-trust architecture, and DLP.
• Strong communication, technical documentation, cross-functional collaboration, ownership, judgment, teaching, and continuous-learning abilities.

Benefits

• Salary range is $220,000—$300,000 USD.
• The company offers a market-proven product, robust funding, and a rapidly scaling environment combining stability with high growth.
• Employees have opportunities to shape priorities, influence strategic decisions, deepen technical expertise, explore leadership opportunities, and learn across functions.
• Snorkel supports career growth, learning, shared success, diversity, equal employment opportunity, and reasonable accommodations.