Security Engineer, Level 5, Offensive Security
Job Description
Snap’s Offensive Security Team is looking for a Security Engineer, Level 5 focused on offensive security and privacy engagements. In this onsite role in Los Angeles, you will design and lead real-world testing across corporate environments, cloud projects and accounts, internal applications, and mobile client applications.
The work blends hands-on assessment execution with threat-informed planning, producing actionable outputs that help teams strengthen detection, mitigation, and overall security posture.
Role scope
- Design, execute, and lead offensive security and privacy engagements, including red, purple, and orange team exercises.
- Conduct assessments across corporate environments, cloud projects/accounts, internal applications, and mobile client applications.
- Maintain an understanding of real-world threat actors, including tools, tactics, and procedures, with an emphasis on threats that target Snap.
Threat modeling and engagement roadmap
- Partner with the threat intelligence team to enumerate exhaustive killchains that seed and prioritize the engagement roadmap.
- Use threat modeling and killchains to guide assessment design.
Reporting and defensive impact
- Produce detailed post-engagement reports covering vulnerabilities, strengths and weaknesses in Snap’s security posture, detection coverage, and recommendations.
- Include prioritized risk mitigation strategies and improvements to defensive measures.
- Advise other security and privacy teams based on engagement findings to align initiatives and identify priority areas for improvement.
Offensive tooling and infrastructure
- Implement and manage offensive security engagement infrastructure and tooling for covert operations that mimic relevant adversary tactics.
- Develop custom implants, payloads, and exploits to test and evaluate defenses.
Subject matter expertise
- Serve as a subject matter expert and consultant across security and privacy teams.
- Participate in security reviews, reproduce vulnerabilities, and support high-stakes incident response efforts.
Research and continuous improvement
- Explore novel research topics aligned to Snap’s tech stack to proactively improve security posture.
- Integrate lessons learned into future exercises.
Required qualifications
- Proven experience leading offensive security engagements, coordinating multiple security engineers, and managing assessments to test and evaluate security measures.
- Expert knowledge in four or more of: operating system internals, networking, application development, mobile client development, Kubernetes, and cloud infrastructure (AWS/GCP).
- Payload/implant/exploit development experience.
- Coding proficiency in one or more modern languages including Java, Python, Go, etc.
- Scripting skills such as Bash and PowerShell to automate security tasks.
- Ability to thrive in new and complex technical environments, building foundational understanding and applying it during engagements.
- Minimum education: Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
- Minimum experience: 6+ years of post-Bachelor’s security related experience; or Master’s degree + 5+ years post-grad security related experience; or PhD + 2+ years post-grad security related experience.
- May provide evidence of personal security research (CVEs or blogs), public bug bounty reports, prior CTF participation, and/or GitHub repositories with personally developed security tools.
Technologies
- Java, Python, Go, Bash, PowerShell
- Kubernetes, AWS, GCP
- ATT&CK
Benefits
- Paid parental leave
- Comprehensive medical coverage
- Emotional and mental health support programs
- Compensation packages including equity in the form of RSUs
Location and work policy
- Los Angeles, CA (onsite)
- Default to work in the office 4+ days per week
Compensation
Annual base salary range varies by zone. The position offers:
- Zone A (CA, WA, NYC): $209,000-$313,000
- Zone B: $199,000-$297,000
- Zone C: $178,000-$266,000