Security Engineer

Snyk Snyk · Enterprise · London, United Kingdom

Security Engineer role focused on building automated detection rules for vulnerabilities using static analysis and AI, protecting millions of developers worldwide. The role involves researching new threats, encoding knowledge into detection rules, and understanding how languages and frameworks handle data and security.

What you'd actually do

  1. Authoring high-precision detection rules using our proprietary logic and domain-specific languages to identify vulnerabilities across various codebases.
  2. Partnering with Program Analysis experts and software engineers to pioneer new approaches in vulnerability detection, leveraging cross-functional expertise to solve complex security challenges.
  3. Investigating new technologies to understand how they handle data and security-critical operations.
  4. Working with customers, understanding their pain points and challenges, and helping secure their code.

Skills

Required

  • Proficiency in a programming language
  • Demonstrated experience and knowledge of Application Security Vulnerabilities
  • A passion for "Security as Code" and the drive to spend time automating a detection rather than fixing a single instance of a bug.
  • An interest in diving into the internals of how languages work—from memory management to how specific frameworks handle state.
  • Interest in learning about the mechanics and inner workings of a language or a framework, and the ability to self-study highly technical concepts.

Nice to have

  • Experience in Static Analysis (SAST), compiler design, or formal methods.
  • Familiar with how modern CI/CD pipelines and developer workflows operate.
  • A track record of contributing to the broader security community or publishing original research.

What the JD emphasized

  • hybrid SAST and AI engine
  • automated detection rules

Other signals

  • AI-native Developer Security Platform
  • hybrid SAST and AI engine
  • automated detection rules