Security Engineer

About Snap Inc.

Snap Inc. is a technology company driven by the belief that the camera enhances how people live and communicate. Our mission is to empower self-expression, promote living in the moment, facilitate learning, and foster shared enjoyment. Snap's core products include Snapchat, a visual messaging app; Lens Studio, an augmented reality platform; and Spectacles, our AR glasses.

Snap Engineering teams craft innovative, technically sophisticated products for hundreds of millions of Snapchatters daily. Our commitment to community well-being is paramount, guiding our values: move fast, act with precision, and prioritize privacy.

The Opportunity: Security Engineer

We are seeking a talented Security Engineer to join either our Enterprise Infrastructure Security (EIS) or Detection and Response (D&R) team. Based in one of our US West Coast offices, this role is crucial for hardening our systems, protecting our global community, and ensuring Snap's security amidst continuous innovation. You will design preventative controls, hunt for active threats, and collaborate across disciplines to secure corporate devices, applications, and cloud infrastructure.

What You'll Do

• Design, implement, and operate security controls for corporate devices, applications, and infrastructure, including execution control, device trust, and network segmentation.
• Build and understand threat models relevant to our platform and business.
• Design, pilot, and implement logging and alerting systems to detect malicious activity across Snap Inc.'s endpoints, infrastructure, networks, and cloud environments (AWS/GCP).
• Investigate security events, triage potential incidents, and drive response efforts.
• Develop tools and automation strategies in Python and/or Go to enhance threat hunting and intrusion response capabilities.
• Conduct security reviews for new features and technologies, focusing on the secure enablement of AI tools.
• Partner with IT and other engineering teams to architect and manage identity and access management (IAM) and SSO integrations.
• Identify, analyze, fingerprint, and build threat intelligence on adversary tactics, techniques, and procedures (TTPs).

Knowledge, Skills & Abilities

• Strong knowledge of operating system internals, with core competency in two or more: macOS, Windows, Linux, Kubernetes, Amazon Web Services, Google Cloud Platform.
• Proven experience in one or more security areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence, or endpoint security.
• Proficiency in Python and/or Go development.
• Ability to conduct design reviews and provide actionable mitigation guidance.
• Excellent verbal and written communication skills, attention to detail, and a track record of collaborating with stakeholders.

Minimum Qualifications

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent practical experience.
• 1+ years of experience in corporate or enterprise security, or a similar security engineering role.

Preferred Qualifications

• Experience evaluating and securely enabling emerging technologies, including AI tools, with a focus on access control and data protection.
• Familiarity with securing lab, IoT, and ancillary systems, including hardening standards, monitoring, and access controls.
• Excellent communication and collaboration skills with internal and external stakeholders.

"Default Together" Policy at Snap Inc.

Snap Inc. operates with a “default together” approach, expecting team members to work in an office 4+ days per week to foster culture, reinforce values, and enhance collaboration with our community, customers, and partners.

Our Benefits

Snap Inc. offers comprehensive benefits designed around your needs, including paid parental leave, extensive medical coverage, emotional and mental health support, and compensation packages that include equity (RSUs), allowing you to share in Snap’s long-term success.

Key skills/competency

• Enterprise Security
• Threat Detection
• Incident Response
• Cloud Security (AWS/GCP)
• Identity and Access Management (IAM)
• Python/Go Development
• Operating Systems (macOS, Windows, Linux)
• Network Segmentation
• Digital Forensics
• Security Controls