AppSec Jobs

Snyk Security Team

Open security roles at Snyk, and what we know about the team behind them.

computer & network security · 1400 employees · 3 open roles. Updated October 14, 2026.

Security at Snyk

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

“Stated AppSec Mission: "Snyk enables developers to build securely from the start while giving security teams complete visibility and comprehensive controls."– Snyk Solutions: Application Security (https://snyk.io/solutions/application-security/), Vendor Self-Published Developer Enablement vs. Gatekeeping: "developer-first security mission"– Snyk joins CISA's Secure by Design pledge (https://snyk.io/blog/snyk-joins-cisas-secure-by-design-pledge/), Blog "automatic fix PRs help devs find and fix vulnerabilities"– Snyk Solutions: Application Security (https://snyk.io/solutions/application-security/), Vendor Self-Published "avoid blocking development early on"– Snyk Team Implementation Guide (https://docs.snyk.io/implementation-and-setup/team-implementation-guide), Docs Risk Philosophy: "Risk-based prioritization"(phrase on product solution page) – Snyk Solutions: Application Security (https://snyk.io/solutions/application-security/), Vendor Self-Published Stated Pain Points or Goals (Verbatim): "Achieve prevention and drive developer adoption"– Snyk Team Implementation Guide (https://docs.snyk.io/implementation-and-setup/team-implementation-guide), Docs "Turn developers into security experts"– Snyk Solutions: Application Security (https://snyk”

The team

  • Org Structure & Reporting Line: - Public sources describe recommended deployment models (embedded champions, team-driven adoption) but do not publish a formal internal org chart or explicit CISO/CTO reporting line for AppSec.
  • Key Public-Facing Leaders: Myke Lyons, CISO – "Myke Lyons joins as Snyk's CISO"– Snyk News (https://snyk.
  • Common Skill/Tool Patterns (from Snyk product/docs wording): "PR checks"/ "IDE plugins"/ "Snyk Learn"– (phrases from Snyk docs recommending IDE, PR checks, and training) – Team Implementation Guide (https://docs.snyk.io/implementation-and-setup/team-implementation-guide) (Evidence ID: E-002, E-003) Gaps & Contradictions: - No public disclosure of AppSec team headcount, nor a published internal org chart mapping AppSec reporting line.

What they're working on

Security Champions Program: Status: Evidence Found "A security champion is a developer that formally represents an engineering team."– Snyk Article: Security Champions Overview (https://snyk.io/articles/security-champions/) ⚠️ "the goals, pain points, and needs of the developer should be put first"– Snyk Article: Security Champions Overview (https://snyk.io/articles/security-champions/) ⚠️ "Shift Left"in Practice: "gradual rollout of your "shift left" security strategy"– Snyk Team Implementation Guide (https://docs.snyk.io/implementation-and-setup/team-implementation-guide) "developers may use IDE plugins"– Snyk Team Implementation Guide (https://docs.snyk.io/implementation-and-setup/team-implementation-guide) "Test Usage in CI/CD Pipeline report"(Snyk Analytics feature) – Snyk Blog: Snyk Analytics (https://snyk.io/blog/transform-your-appsec-program-with-the-power-of-snyk-analytics/) Vulnerability Management Process: Intake: "Snyk's robust security intelligence provides you with timely, accurate information on new vulnerabilities."– Snyk Blog: Secure by Design pledge (https://snyk.io/blog/snyk-joins-cisas-secure-by-design-pledge/) Triage / Remediation: "Snyk Agent Fix enables developers to remediate issues directly in pull requests"– Snyk Analytics Blog (https://snyk.io/blog/transform-your-appsec-program-with-the-power-of-snyk-analytics/) Secure SDLC Artifacts: "Achieve prevention and drive developer adoption"– Implementation guide (https://docs.snyk.io/implementation-and-setup/team-implementation-guide) "Providing an SBOM allows customers to manage their own software supply chain risk."– Snyk Blog on Secure by Design (https://snyk.io/blog/snyk-joins-cisas-secure-by-design-pledge/) Recent Initiatives (Last 6 Months): Evidence Found (within last 6 months from): - AI Trust platform & Snyk Analytics features (reports, dashboards, Fix PR Visibility) described – "Snyk Analytics offers a whole new set of features"– Snyk Blog (https://snyk.io/blog/transform-your-appsec-program-with-the-power-of-snyk-analytics/) - Participation in CISA Secure by Design pledge – "Snyk has enthusiastically joined CISA's Secure by Design pledge."– Snyk Blog (https://snyk.io/blog/snyk-joins-cisas-secure-by-design-pledge/) Gaps & Contradictions: - No public, detailed step-by-step internal triage SLAs (e.g., MTTR numbers or explicit SLA days) for AppSec findings were found in Snyk public documentation. - No explicit public statement of AppSec team reporting line or centralized vs. embedded model for Snyk's internal engineering org (beyond recommendations for customers)