Security Engineer

• Provide on-site airport supervision to ensure the secure, compliant handling of fine art shipments
• Meet and oversee shipments at airline cargo terminals through palletization, vehicle loading, or release to tarmac supervision
• Track and monitor all supervised inbound and outbound flights in accordance with established schedules
• Maintain supervision schedules and provide timely reporting, including written updates and photographic documentation
• Handle, tender, and verify required shipping and airline documentation
• Supervise pallet build-ups and breakdowns in accordance with fine art handling and shipping standards
• Provide professional courier assistance and act on the courier’s behalf throughout all stages of transport
• Transport couriers between airports, cargo terminals, warehouses, museums, galleries, and designated locations as required
• Maintain positive, professional relationships with airline personnel, ground crews, and logistics partners to ensure efficient operations
• Identify and resolve operational issues in coordination with internal shipping coordinators, including follow-car or convoy supervision as requested

Security and Supervision Agent

• Own Eko's corporate IT strategy, infrastructure, and day-to-day operations, including employee endpoints, identity and access management, corporate network, cloud workplace tools, helpdesk/support, and asset management
• Manage software and SaaS procurement, licensing, lifecycle, vendor selection, and renewal negotiations in partnership with Finance
• Own the IT budget and technology roadmap
• Build or manage the team responsible for day-to-day IT support
• Design, implement, and continuously mature Eko's corporate cybersecurity program
• Own the corporate security risk register and drive remediation of identified gaps
• Serve as Eko's primary point of contact for corporate-level security incidents
• Own SOC 2 Type I/II end to end, including scoping, control design and implementation, evidence collection, and external audit management
• Own or contribute to other corporate compliance obligations, including HIPAA/HITECH, HITRUST, CCPA, and UK/EU GDPR as applicable
• Serve as the primary liaison for customer and partner security questionnaires, vendor security due diligence, and audit committee or board reporting
• Maintain the compliance calendar for renewals, audits, and control testing
• Own timely delivery of corporate compliance and security documentation requested by customers
• Maintain a current documentation package for Sales and Customer Success
• Partner with Sales, Customer Success, and Legal on customer security calls and due-diligence sessions
• Partner with People/HR on secure onboarding, offboarding, device provisioning, and access provisioning/deprovisioning
• Partner with Legal on vendor security reviews and data processing agreements
• Partner with Product Security as a testing resource, executing tests against procedures defined by that team

Head of IT, Cybersecurity

• Design and implement information assurance and security engineering systems
• Address business continuity, operations security, cryptography, forensics, regulatory compliance, insider threat detection and mitigation, and physical security analysis
• Assess and mitigate system security threats and risks throughout the program life cycle
• Validate system security requirements definition and analysis
• Establish system security designs
• Implement security designs in hardware, software, data, and procedures
• Verify security requirements
• Perform system certification and accreditation planning and testing and liaison activities
• Support secure systems operations and maintenance
• Contribute to a government program focused on enhancing and securing mission-critical systems and environments
• Support enterprise-level security and modernization efforts across IT infrastructure, cybersecurity, physical facilities, and personnel operations

Senior Information Systems Security Officer, ISSO

• Lead Snap's Production Security team and own the security of infrastructure running Snapchat
• Set and drive multi-year technical strategy for production infrastructure security across network perimeter, cloud hardening, workload identity, and CI/CD
• Translate production risk into a prioritized roadmap and balance security outcomes, productivity, and system health
• Oversee development and operation of perimeter, cloud configuration enforcement, service identity, secrets management, and developer-facing security platforms
• Own service reliability, on-call health, customer support, and incident response for production security services
• Drive vulnerability and misconfiguration identification, triage, remediation, and ownership across cloud environments and backend systems
• Oversee platform, backend-service, and business-application security reviews, exception handling, and formal risk acceptance
• Partner with Infrastructure, Developer Productivity, Product Engineering, Detection and Response, and Offensive Security teams
• Guide secure adoption of LLMs, AI tooling, and agentic workloads, focusing on identity, access boundaries, and data protection
• Participate in incident response, red team engagements, quarterly planning, and annual planning
• Recruit, develop, and manage high-caliber security engineers while building security culture across Snap

Manager, Security Engineering – Production Security

• Develop model policies that guide safe and useful behavior
• Build evaluations, identify policy gaps and model failures, and use findings to improve policies and training
• Work with research, engineering, and domain experts to support safe, reliable deployment
• Shape model behavior for U.S. government use, with a focus on national security applications
• Define nuanced policies and translate them into training and evaluation criteria for high-stakes scenarios

Model Policy Manager – National Security

• Lead Snap's Production Security team and own the security of infrastructure running Snapchat
• Set and drive a multi-year technical strategy for production infrastructure security across network perimeter, cloud hardening, workload identity, and CI/CD
• Translate production risk into a prioritized roadmap and make tradeoffs among security outcomes, productivity, and system health
• Ensure production security platforms and developer-facing libraries demonstrate high technical quality, reliability, and operational excellence
• Own service reliability, on-call health, customer support, and incident response for production security services
• Drive identification, triage, and remediation of vulnerabilities and misconfigurations across cloud environments and backend systems
• Oversee security reviews of platforms, backend services, and business application integrations
• Partner with Infrastructure, Developer Productivity, and Product Engineering to embed security controls by default
• Guide secure and responsible adoption of LLMs, AI tooling, and agentic workloads
• Partner with Detection and Response, Offensive Security, and infrastructure teams during incidents and red team engagements
• Participate in quarterly and annual planning
• Recruit engineers and build a collaborative, productive security team
• Support team members' career growth and manage performance

Manager, Security Engineering, Production Security

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems
• Protect sensitive data through access management, encryption, and secure data handling
• Identify, assess, and mitigate security risks through vulnerability assessments, penetration testing, and security reviews
• Lead incident response, including detection, containment, remediation, and follow-up analysis
• Integrate security into the SDLC through threat modeling, secure code review, and automated security checks in CI/CD and infrastructure-as-code
• Implement and operate security monitoring and logging for real-time threat detection and response
• Support FedRAMP and DoD accreditation efforts, including ATO packages, SSPs, and POA&Ms
• Help maintain CMMC 2.0 readiness and alignment with DFARS cybersecurity clauses
• Secure AI systems, including LLM and retrieval-based features, against prompt injection, data leakage, and model misuse
• Partner with software teams and operate as an early security owner in a fast-moving aviation technology startup

Senior Security Engineer

• Own the security vulnerability backlog for kernel and firmware components, driving timely triage, remediation, and SLA compliance
• Identify creative, scalable approaches to reduce vulnerability backlog growth
• Lead a continuous security pipeline involving scanning, triage, root-cause analysis, remediation, and validation across software and firmware components
• Communicate security risks, security posture, and remediation progress through metrics, reports, and stakeholder engagement
• Partner with engineering and security teams to define and execute long-term security strategy and product hardening efforts
• Drive and implement security reviews of software and hardware designs
• Assist others in ensuring product quality and robustness
• Evaluate, recommend, and develop security technologies, tools, and practices, including static analysis and dynamic fuzzing solutions

Security Engineer, GPU Kernel Driver

• Design, execute, and lead offensive security and privacy engagements, including red, purple, and orange team exercises
• Assess corporate environments, cloud projects/accounts, internal applications, and mobile client applications
• Maintain understanding of real-world threat actors, tools, tactics, and procedures
• Collaborate with threat intelligence to enumerate killchains and prioritize the engagement roadmap
• Deliver post-engagement reports identifying vulnerabilities, security strengths and weaknesses, detection coverage, and actionable risk mitigation recommendations
• Implement and manage offensive security infrastructure and tooling for covert operations and adversary emulation
• Develop custom implants, payloads, and exploits
• Collaborate with security and privacy teams to share engagement insights and inform strategic roadmaps
• Serve as a subject matter expert and consultant in security reviews, vulnerability reproduction, and high-stakes incident response
• Research novel topics relevant to Snap's technology stack and integrate lessons into future exercises

Security Engineer, Level 5, Offensive Security

• Maintain the operational security posture of assigned information systems and networks
• Develop and maintain System Security Plans and Security Control Traceability Matrices
• Ensure confidentiality, integrity, accessibility, and operational availability of information system resources
• Advise Information Systems Security Managers, Program Security Officers, and Delegated Authorizing Officials
• Perform alternate ISSM duties to maximize operational readiness and effectiveness
• Maintain Authority to Operate and Authorization to Connect while ensuring Risk Management Framework compliance
• Prepare organizations for cybersecurity, physical security, and personnel security assessments
• Conduct regular cybersecurity assessments to identify vulnerabilities and evaluate security controls
• Develop Plan of Action and Milestones, inspection reports, remediation strategies, and supporting documentation
• Develop and integrate access-control policies and procedures
• Participate in professional engagements with supporting and supported organizations
• Maintain information system documentation and advise the Configuration Control Board on ATO/ATC conflicts
• Conduct cybersecurity audits and manage audit records
• Complete initial and annual training required to maintain system and network access

Security Engineer jobs in California