Security Engineer, Vulnerability Modeling (Snyk Code)

Every day, the world gets more digital thanks to tens of millions of developers building the future faster than ever. But with exponential growth comes exponential risk, as outnumbered security teams struggle to secure mountains of code. This is where Snyk (pronounced “sneak”) comes in. Snyk is a developer security platform that makes it easy for development teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and cloud infrastructure — and do it all right from the start. Snyk is on a mission to make the world a more secure place by empowering developers to develop fast and stay secure.

Joining Snyk means embracing our core values: One Team, Care Deeply, Customer Centric, and Forward Thinking. As a member of our team, you’ll have the opportunity to thrive in a dynamic environment where fostering collaboration, leading with empathy, driving business impact, and inspiring trust are at the heart of everything we do.

The Opportunity

As a Security Engineer on the Code Rules team (part of Snyk Code), you sit at the intersection of security research, static analysis, and artificial intelligence. Your mission is to transform deep security insights into scalable, automated intelligence.

In Code Rules, we turn vulnerability research into automated detection rules, allowing us to identify a flaw once and scale that protection across every codebase we scan. You will be responsible for building the logic that enables our hybrid SAST and AI engine to recognize complex security patterns across dozens of languages and thousands of frameworks, protecting millions of developers worldwide.

The Role

You will be responsible for keeping Snyk at the forefront of the security landscape. This involves researching how new languages and emerging frameworks introduce unique threats and then encoding that knowledge into detection rules that run at scale.

You'll spend your time:

• Authoring high-precision detection rules using our proprietary logic and domain-specific languages to identify vulnerabilities across various codebases.

• Partnering with Program Analysis experts and software engineers to pioneer new approaches in vulnerability detection, leveraging cross-functional expertise to solve complex security challenges.

• Investigating new technologies to understand how they handle data and security-critical operations.

• Working with customers, understanding their pain points and challenges, and helping secure their code.

What you'll need:

• A passion for "Security as Code" and the drive to spend time automating a detection rather than fixing a single instance of a bug.

• An interest in diving into the internals of how languages work—from memory management to how specific frameworks handle state.

• Demonstrated experience and knowledge of Application Security Vulnerabilities.

• Proficiency in a programming language.

• Interest in learning about the mechanics and inner workings of a language or a framework, and the ability to self-study highly technical concepts.

• A passion for cybersecurity, and a desire to contribute and be an active participant in the security community.

We'd be lucky if you:

• Have experience in Static Analysis (SAST), compiler design, or formal methods.

• Are familiar with how modern CI/CD pipelines and developer workflows operate.

• Have a track record of contributing to the broader security community or publishing original research.

We care deeply about the warm, inclusive environment we’ve created and we value diversity – we welcome applications from those typically underrepresented in tech. If you like the sound of this role but are not totally sure whether you’re the right person, do apply anyway!

About Snyk

Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.

Benefits & Programs

- Prioritize health, wellness, financial security, and life balance with programs tailored to your location and role.

- Flexible working hours, work-from home allowances, in-office perks, and time off for learning and self development

- Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers

- Health benefits, employee assistance plans, and annual wellness allowance

- Country-specific life insurance, disability benefits, and retirement/pension programs, plus mobile phone and education allowances