Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Senior Product Security Engineer

Home > Other programming jobs

Senior Product Security Engineer in USA

  • Boston, MA

Responsibilities

  • Threat-model Snyk’s GCP and AWS cloud infrastructure and negotiate required security changes with the platform teams that own the systems.
  • Use AI coding agents to draft Terraform, Kubernetes, and pipeline fixes, then raise changes for review and merge by owning teams.
  • Scale agent-driven infrastructure fixes across repositories while ensuring changes are scoped and reviewable.
  • Write and maintain agent skills, prompts, instruction files, and security baselines.
  • Connect AI agents to live cloud, CSPM, and ticketing data through MCP servers, command-line tools, and provider APIs.
  • Review AI-generated infrastructure changes for invented resources, unsafe defaults, overly broad IAM permissions, leaked secrets, and unreviewed changes.
  • Harden GCP and AWS IAM, including resource hierarchies, roles, conditions, service accounts, workload identity federation, and organization policies.
  • Improve GKE, Kubernetes, and container security, including cluster hardening, RBAC, admission control, network policy, and secure image pipelines.
  • Add automated security testing and CSPM tooling to CI/CD and GitOps pipelines and help teams remediate findings.
  • Benchmark infrastructure against the CIS Google Cloud Foundation Benchmark, ISO 27001, and NIST 800-53 controls.
  • Measure the effectiveness of agent-driven remediation and continuously improve the approach.

Requirements

  • 5–8 years of experience running or securing cloud infrastructure, ideally including building and operating production platforms on GCP or AWS.
  • Deep hands-on GCP knowledge, including GCP security services, plus working knowledge of AWS; equivalent AWS IAM depth is a bonus.
  • Strong knowledge of GCP IAM, resource hierarchies, IAM roles and conditions, service accounts, workload identity federation, organization policy constraints, and least-privilege design.
  • Practical Kubernetes and container experience, primarily with GKE, including private clusters, Autopilot, RBAC, admission control, workload identity, network policy, and secure container images.
  • EKS experience is welcome.
  • Experience with infrastructure as code such as Terraform and automated deployment through CI/CD pipelines and GitOps.
  • Solid DevSecOps practice, including threat modeling, shift-left testing, continuous monitoring, and converting findings into infrastructure changes.
  • Confidence using AI coding agents such as Claude Code and writing guidance and prompts for reliable output at scale.
  • Ability to critically assess AI-generated infrastructure changes for invented resources, unsafe defaults, and overly broad IAM permissions.
  • Ability to work consultatively and influence teams that own and operate infrastructure.
  • Application security knowledge such as code review and OWASP Top 10 experience, or experience with Snyk or similar security testing tools, is preferred.

Benefits

  • Flexible working hours, work-from-home allowances, in-office perks, and time off for learning and self-development.
  • Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers.
  • Health benefits, employee assistance plans, and an annual wellness allowance.
  • Country-specific life insurance, disability benefits, retirement or pension programs, mobile phone allowances, and education allowances.

Salary: $192k - $230k/yr

Snyk

Snyk, the leader in secure AI software development, empowers organizations to build fast and stay secure by unleashing developer productivity and reducing business risk. The company’s AI Trust Platform seamlessly integrates into developer and security workflows to accelerate secure software deliv...

Similar positions

Senior Test Automation Engineer

  • City of New York
  • Full time
  • USA
  • 09/13/2026
  • Brooklyn, NY

Backend Engineer, Security Platform

  • Vannevar
  • Full time
  • USA
  • 09/13/2026
  • Salary: $150k - $215k/yr
  • Remote

Agentic Security Engineer

  • NXP Semiconductors
  • Full time
  • USA
  • 09/13/2026
  • Austin, TX

Sr Application Security Engineer

  • Henry Schein One
  • Full time
  • USA
  • 09/13/2026
  • Salary: $125k-$160k
  • Remote

Senior DevOps Engineer, Infrastructure & Reliabili

  • Worth AI
  • Full time
  • USA
  • 09/13/2026
  • Remote

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026