Software Engineer – Security

Snorkel AI

Security Engineer securing Snorkel AI’s cloud infrastructure, developer platform, and AI product ecosystem. Building AWS, Kubernetes, IAM, and security automation at scale.

Posted 8/20/2026full-timeNew York City • California, New York • 🇺🇸 United StatesMid-LevelSenior💰 $220,000 - $300,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and scaling Infrastructure as Code governance strategies, with a strong focus on security and developer velocity. Proficient in AWS cloud architecture, IAM role management, and network security, while effectively communicating risks and collaborating across teams.

Highest-signal resume keywords

AWS Cloud ArchitectureInfrastructure as Code (Terraform)Network SecurityIAM Role and Policy ManagementThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Python ProgrammingGo ProgrammingCSPM ToolingEncryption and Key ManagementContainer and OS HardeningVulnerability ManagementSecure Design AssessmentsAutomation DevelopmentSecurity ToolingMulti-Account Strategies

Soft Skills

Communication of Security RisksCollaboration Across TeamsContext-SwitchingSelf-DirectionContinuous Learning

Tools & Technologies

AWS KMSSecrets ManagerHashiCorp VaultCI/CD PipelinesPolicy-as-Code Frameworks

Certifications & Qualifications

NIST CSFISO 27001SOC 2CIS Benchmarks

Industry Keywords

Infrastructure as Code GovernanceCloud-Native EnvironmentsZero-Trust ArchitectureSecure Development LifecycleIncident Response/DFIR

Tech Stack

Tools & technologies

AWSCloudGoKubernetesPythonSwitchingTerraformVault

About the role

Key responsibilities & impact

Build and scale Infrastructure as Code governance strategies that embed security while enabling developer velocity
Operate and tune CSPM tooling and coordinate remediation through engineering teams
Investigate security events, triage incidents, identify root causes, and own remediation through resolution
Architect secure AWS cloud account structures, including landing zones, multi-account patterns, network segmentation, and cross-account roles
Design and implement network security architectures using security groups, NACLs, subnetting, routing layers, and egress controls
Establish secure-by-default design patterns across Kubernetes and containerized workloads
Design, maintain, and govern IAM role and policy architectures for human and machine identities
Implement encryption for data at rest and in transit, including key rotation using AWS KMS and related services
Conduct threat modeling, architecture reviews, and secure design assessments
Assess and secure AI/ML product architectures, trust boundaries, API boundaries, and data flows through training and inference pipelines
Build secure automation using Python, AWS-native services, and policy-as-code frameworks
Own complex security projects end-to-end, from discovery and design documentation through implementation, rollout, and long-term ownership
Align cloud security strategy with NIST CSF, ISO 27001, SOC 2, and CIS benchmarks
Partner with infrastructure, platform, product, application, engineering, and security teams
Embed security from code to cloud across systems, data, customer environments, and developer workflows

Requirements

What you’ll need

Programming skills in Python, Go, or similar languages, with ability to build security tooling and automation
Experience building and operating systems at scale in cloud-native, containerized environments
Proficiency with Infrastructure as Code (Terraform), including modules, CI/CD pipelines, deployment governance, and security reviews
AWS cloud architecture experience: multi-account strategies, landing zones, environment isolation, and cross-account role design
IAM experience: role and policy architectures, least privilege, and human and machine identity patterns
Network security experience: security groups, NACLs, VPC design, subnet segmentation, routing layers, and egress controls
Experience with threat modeling and secure design assessments
Experience with encryption and key management using AWS KMS, Secrets Manager, or HashiCorp Vault
Experience with container and OS hardening
Experience with CSPM tooling
Experience investigating security events, including triage, root cause assessment, and remediation ownership
Experience with vulnerability management lifecycle
Awareness of AI/ML security risks, including prompt injection, data poisoning, model extraction, and training data protection
Knowledge of NIST CSF, ISO 27001, SOC 2, and CIS benchmarks
Experience designing secure architectures for high-growth SaaS or cloud-native environments
Ability to communicate security risks, trade-offs, and recommendations to technical and non-technical audiences
Ability to write concise, structured technical documentation
Ability to build alignment across teams without relying on positional authority
Ability to collaborate with engineering, product, and infrastructure teams
Comfortable with broad ownership, context-switching, and self-direction
Ability to manage multiple concurrent initiatives
Commitment to continuous learning
Preferred: secure development lifecycle practices, incident response/DFIR, detection engineering, offensive security, multi-cloud environments, zero-trust architecture, and DLP strategies

Benefits

Comp & perks

Meaningful opportunities to shape priorities and initiatives
Influence key strategic decisions
Directly impact company success
Opportunities to deepen technical expertise
Leadership opportunities
Opportunities to learn new skills across multiple functions
Career growth, learning, and shared success
Equal employment opportunities
Reasonable accommodation for applicants and employees with disabilities