Synack

Synack

Synack is a premier security testing platform that offers human-powered security solutions for enterprise applications and networks, providing continuous testing and strategic security solutions to stay ahead of threats.

Professional Services
51-250
Founded 2013
$112M raised

Description

  • Automate System Security Plans, including security concepts of operations, risk matrices, control traceability matrices, and security impact analyses.
  • Develop and maintain automated Plans of Action and Milestones (POAMs).
  • Own inventory and risk assessments for AI and agentic systems, aligned with NIST AI RMF and ISO 42001.
  • Build automated security evidence collection and control-drift monitoring.
  • Communicate compliance issues, mitigation activities, reports, and metrics to stakeholders.
  • Codify security controls into infrastructure-as-code guardrails, CNAPP policies, and CI/CD checks.
  • Collaborate with project managers and software engineers to implement security policies, hardening, and DevSecOps practices.
  • Coordinate responses to vendor security assessments and conduct third-party vendor risk assessments.
  • Support automation and responsible AI adoption within Information Security operations.

Requirements

  • 8+ years of experience in IT security strategy, risk management, IT audit, and compliance within a cloud service provider.
  • Experience with Python, Terraform, CI/CD pipelines, and integrating tools with AI.
  • Experience with enterprise GRC tools.
  • Experience with monitoring and alerting tools such as Datadog, Stackdriver, and Azure Sentinel.
  • Experience with SOAR or auto-remediation platforms and SIEM query or detection engineering languages.
  • Experience with Cloud Native Application Protection Platforms (CNAPP).
  • Experience integrating security tools into the software development lifecycle.
  • Familiarity with secrets management and non-human workload identity.
  • Working knowledge of ISO 27000, ISO 42001, OWASP, SOC 2, GDPR, CMMC, FedRAMP, and NIST frameworks.
  • Excellent written and verbal communication skills for technical and non-technical audiences.
  • Must be a United States citizen due to federal contract requirements.

Benefits

  • $150,000–$180,000 salary range across U.S. locations.
  • Potential equity and additional benefits.
  • Benefits package provided by Synack.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Threat Hunter/Purple Team Operator

SIXGEN 51-250 Professional Services

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to hunt for threats, support red team engagements, and improve real-time defensive detection for government and critical-infrastructure customers.

Carbon Black Cybersecurity Elasticsearch PowerShell Python SIEM Splunk
5 hours, 40 minutes ago

Manager, Threat Intelligence

PDI Technologies, 1K-5K Gas Utilities

PDI Technologies is seeking a Threat Intelligence, Threat Hunting, and Detection Engineering leader to build and lead a SOC program that protects more than 12,000 convenience retail, petroleum, hospitality, and automotive customers.

AWS Azure Cybersecurity Python SIEM Splunk
1 day, 5 hours ago

Incident Response & DFIR Lead

JustMarkets 1-10 Capital Markets

Lead incident response and digital forensics investigations for a fintech company, coordinating containment, recovery, evidence preservation, and improvements to cyber defense capabilities.

Active Directory AWS Linux Network Security PowerShell Python SIEM
1 week, 3 days ago

Cyber Security Specialist

RecargaPay 251-1K Capital Markets

RecargaPay is hiring a Cyber Security Specialist to join its remote CSIRT team and lead detection, response, containment, and automation for security incidents across its cloud-native payments platform.

AWS Bash CrowdStrike Cybersecurity Elasticsearch Kibana Linux Python
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers