Senior Manager, Security Engineering

Snap Snap · Consumer · Los Angeles, CA +2

Senior Manager for Application Security at Snap, focusing on defining and driving security strategy, identifying risks, establishing secure SDLC practices, and leading architecture reviews. The role emphasizes automation, influencing leadership, and managing security engineers, with a requirement to leverage AI tools for development and auditing their output.

What you'd actually do

  1. Define and drive a multi-year application security strategy aligned to Snap’s product roadmap and company priorities
  2. Identify systemic product security risks and assume direct ownership of high-impact initiatives that reduce risk at scale across Snap’s application ecosystem
  3. Establish scalable practices for secure design reviews, threat modeling, code review, and security testing (SAST, DAST, SCA, fuzzing, etc.)
  4. Lead application security architecture reviews for high-risk or high-impact product initiatives
  5. Drive automation-first approaches that increase security coverage while minimizing friction for engineering teams

Skills

Required

  • Application security expertise
  • Secure architecture
  • OWASP Top 10
  • Mobile security
  • Modern attack techniques
  • Secure SDLC programs
  • SAST
  • DAST
  • SCA
  • Fuzzing
  • Manual code review
  • Web application architectures
  • Mobile application architectures
  • Backend application architectures
  • Partnering with product engineering teams
  • Strategic operation
  • Technical detail understanding
  • Bachelors in technical field or equivalent experience
  • 9+ years security experience (or equivalent with advanced degrees)
  • 2+ years managing managers or technical/strategic leadership for engineering teams
  • Managing, mentoring, and scaling diverse engineering teams

Nice to have

  • Leading application security in a large consumer technology company
  • Embedding security into high-velocity product organizations
  • Operating in zero-trust or BeyondCorp-inspired environments

What the JD emphasized

  • application security strategy
  • secure design reviews
  • security testing
  • AI tools
  • AI systems
  • AI output