Security Engineer, Level 5, Offensive Security

Responsibilities: Design, execute, and leadoffensive securityandprivacyengagements, includingred , purple, andorangeteam exercises across corporate environments, cloud projects/accounts, internal applications, and mobile client applications. Maintain strong awareness ofreal-world threat actors, including tools, tactics, and procedures; partner with thethreat intelligence teamto enumerate exhaustive killchains that seed and prioritize the future engagement roadmap. Producedetailed post-engagement reportscovering discovered vulnerabilities, security posture strengths/weaknesses, detection coverage, andactionablerecommendations, including prioritized risk mitigation and defensive improvements. Build and operate offensive engagement infrastructure and tooling to run covert operations and emulate adversary tactics, including creation ofcustom implants, payloads, and exploitsto test defenses. Coordinate with other security and privacy teams to share findings, inform strategic roadmaps, and align on security improvement initiatives. Act as a subject matter expert and consultant for security and privacy teams by participating in security reviews, reproducing vulnerabilities, and supportinghigh-stakes incident response .Explore novel research topics tied to Snap’s tech stack and apply lessons learned to future exercises.

Preferred Qualifications: Familiarity with frameworks likeATT&CKto represent tools, tactics, and procedures. Experience leading or participating inincident response, including deep understanding ofdigital forensics , detection engineering, andthreat hunting .Proven ability to collaborate cross-functionally at all levels (developers, IT, executive leadership) to align security measures with organizational goals.