Manager, Security Engineering, Production Security

Snap•Santa Monica, CA

5d•Hybrid

About The Position

Snap Inc. is seeking a Security Engineering Manager to lead their Production Security team. This role is responsible for the security of the infrastructure that runs Snapchat, hardening production environments across AWS and Google Cloud, building perimeter, workload identity, and deployment controls, and making secure practices the easiest option for developers. The position involves setting technical direction for company-wide security services, ensuring their engineering quality and operational excellence, and managing a significant operational load alongside planned initiatives. The role also includes direct participation in incident response, driving vulnerability remediation, overseeing security reviews, and partnering with various engineering teams to embed security controls by default. A key aspect of this role is influencing the secure adoption of LLMs and AI tooling, focusing on identity, access, and data protection, and partnering with other security teams during incidents and red team engagements. The manager will also align team direction with organizational goals, participate in planning, and recruit and develop high-caliber engineers, fostering a positive security culture.

Requirements

Proven experience in one or more production and infrastructure security areas: cloud security architecture, network perimeter and zero-trust design, workload identity and secrets management, container and Kubernetes security, or CI/CD and software supply chain security.
Deep understanding of one or more infrastructure domains: Kubernetes, containers, service mesh technologies such as Istio or Envoy, networking, or Linux internals.
Hands-on experience deploying and securing services in multi-cloud environments, particularly AWS and Google Cloud Platform.
Working knowledge of authentication and authorization protocols and frameworks, including OpenID Connect, OAuth, mTLS, and identity federation.
Development skills in Go, Python, and/or Java, enough to review designs, assess technical quality, and stay credible with your engineers.
Ability to apply defense in depth and zero-trust principles to a large, heterogeneous production environment, and to sequence controls so that adoption succeeds at scale.
Strong verbal and written communication skills, and the ability to influence senior engineering leaders without direct authority.
Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
8+ years of post-bachelor's industry experience; or a Master's degree in a technical field + 7+ years of post-grad security experience; or a PhD in a related technical field + 4+ years of post-grad security experience.
1+ year(s) of experience as an Engineering Manager.

Nice To Haves

Experience leading teams that both build and operate platform services at scale, including accountability for SLAs, on-call, and migration of large internal customer bases.
Track record driving company-wide adoption of a security control or platform, including the partner management and change management required to get there.
Familiarity with cloud security posture management platforms and native AWS and GCP security services.

Responsibilities

Set and drive a multi-year technical strategy for securing Snap's production infrastructure across network perimeter, cloud organization hardening, machine credentials and workload identity, and CI/CD.
Translate production risk into a prioritized roadmap, making judicious tradeoffs between near-term asks, long-term security outcomes, team productivity, and system health.
Ensure the platforms your team builds and operates, from perimeter and cloud configuration enforcement to service identity and secrets management, consistently demonstrate high technical quality, reliability, and operational excellence.
Balance a substantial operational load against planned initiatives, owning service reliability, on-call health, and the customer support model for a portfolio of production security services and developer-facing libraries, and participate directly in incident response for production environments.
Drive identification, triage, and remediation of vulnerabilities and misconfigurations across cloud environments and backend systems, holding clear ownership and timelines rather than accumulating open findings.
Oversee security reviews of platforms, backend services, and business application integrations, and set a review model that produces measurable risk reduction while unblocking engineering teams. This includes managing exception handling and formal risk acceptance when a control cannot be met.
Partner closely with Infrastructure, Developer Productivity, and Product Engineering to embed security controls inside Snap's service abstractions so that teams inherit security by default instead of adopting it by exception.
Influence the secure and responsible adoption of LLMs, AI tooling, and agentic workloads across Snap's engineering ecosystem, with a focus on identity, access boundaries, and data protection.
Partner with Detection and Response, Offensive Security, and infrastructure teams during incidents and red team engagements to drive containment and durable fixes rather than one-off patches.
Align your team's direction with the strategic goals of the organization, and participate in quarterly and annual planning so investment lands on the highest impact risks.
Recruit high caliber engineers and build an engaging, collaborative, and productive team that positively influences the security culture of the broader organization.
Invest in your team members' career growth, use effective performance management tools, and build mechanisms that delegate execution while holding a high bar.