S

Synack

Continuous security testing with Red Team

Graduate Software Engineer (AI)

Full-TimeUpdated on 10/20/2026
No salary listed
Entry, Junior, Mid
Bachelor's
Remote in UK
Remote
Software EngineeringAI Application Engineering

About the job

Requirements
  • A degree in a computing or technology discipline.
  • Approximately one year of work or internship experience relevant to the role.
  • Three years of hands-on experience with Python or Go.
  • Some experience with AI technologies such as large language models, retrieval-augmented generation, and MCP.
  • Some understanding of token usage and large language model cost optimization techniques.
  • Strong experience and understanding of microservices, REST API design, gRPC, unit testing, and behavior-driven development testing.
  • Strong design skills.
  • Some experience with asynchronous messaging technologies such as Google Pub/Sub or Kafka.
  • In-depth knowledge of NoSQL and relational database management systems.
  • Strong experience with Docker, Kubernetes, and cloud environments.
  • Experience working on agile teams.
  • Excellent communication and collaboration skills across all mediums.
  • Experience working on and scaling a microservice-based application.
  • Ability to work effectively in a collaborative environment involving different stakeholders and subject matter experts.
  • Responsibility for maintaining Synack’s security and privacy posture.
Responsibilities
  • Design, implement, and deliver scalable AI-centric software systems.
  • Help develop agentic AI capabilities for identifying vulnerabilities, automating penetration testing processes, optimizing workflows, and enhancing threat intelligence.
  • Own and drive product features end to end, from ideation through production deployment and monitoring.
  • Contribute to and drive the design and implementation of AI-enabled systems while promoting effective software development lifecycle processes.
  • Participate in technical discussions, code reviews, and design sessions, sharing expertise to uplift the team’s capabilities.
  • Collaborate with cross-functional teams to integrate AI capabilities into broader systems and applications.
Desired Qualifications
  • Exposure to Domain-Driven Design.
  • UML design skills.
  • Experience with Google Cloud Platform.

About the company

S

Synack

View
cbWebsite

Synack provides a security testing platform that runs continuous penetration testing with a global team of researchers (the Synack Red Team). It checks for vulnerabilities across cloud, APIs, web apps, hosts, and mobile, by simulating attacks in a controlled way. The service launches in days and scales with the client’s needs and environment. Clients receive real-time, customizable reports and integrated workflows that help security teams triage, remediate, and track findings across their assets. Compared with traditional one-off pentests, Synack offers ongoing coverage, visibility, and control, enabling faster risk reduction and ongoing protection. The company’s goal is to help organizations stay ahead of cyber threats by providing continuous security testing and actionable vulnerability management.”} /* end */ }````````````````````````````````````````````````````````````````````````````````````````````````` } // end tool call

Company Size

201-500

Company Stage

Series D

Total Funding

$107.3M

Headquarters

Redwood City, California

Founded

2013

Get referred to Synack

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • October 2026 merger with NetSPI expands sales reach across banks, cloud providers, and federal agencies.
  • September 15, 2026 executive-ready reporting shortens board-level remediation decisions.
  • DoD Tradewinds Awardable status for Sara AI Pentesting strengthens federal procurement credibility.

What critics are saying

  • Merger integration risks customer service during platform consolidation through 2027.
  • Synack's moat depends on keeping 1,500 researchers engaged; attrition weakens coverage fast.
  • Wiz, autonomous pentest vendors, and internal red teams compress pricing and replace point-in-time testing.

What makes Synack unique

  • Synack blends Sara AI Pentesting with 1,500 vetted researchers for real exploit validation.
  • September 23, 2026 Wiz integration pushes Synack findings into unified cloud risk workflows.
  • September 2, 2026 NetSPI merger creates a $200M-plus offensive security platform.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Flexible vacation policy
  • Company bonding & team events
  • Covered health plan benefits

Growth & Insights and Company News

Headcount

6 month growth

2%

1 year growth

1%

2 year growth

0%
GlobeNewswire
Oct 8th, 2026
Synack wins 'agentic AI Security Solution of the Year' in 2026 CyberSecurity Breakthrough Awards program.

Synack wins 'agentic AI Security Solution of the Year' in 2026 CyberSecurity Breakthrough Awards program. Recognition highlights Sara AI Pentesting's combination of agentic AI and human expertise to expand testing coverage and validate exploitable risk. October 08, 2026 10:00 ET | Source: Synack REDWOOD CITY, Calif., Oct. 08, 2026 (GLOBE NEWSWIRE) - NetSPI+Synack, the leader in expert human + agentic AI pentesting, today announced that Sara AI Pentesting has been selected as "Agentic AI Security Solution of the Year" in the 10th annual CyberSecurity Breakthrough Awards program. Conducted by CyberSecurity Breakthrough, an independent market intelligence organization, the annual program recognizes innovative companies, products and technologies driving progress in the global information security industry. Sara, the Synack Autonomous Red Agent, expands security testing coverage across external web applications and hosts using AI-driven discovery and analysis. The agentic system handles reconnaissance, testing and analysis, adapting attack paths in real time based on how the target responds. Synack combines this technology with the Synack Red Team, a rigorously vetted global community of security researchers who validate real-world exploitability, identify chained attack paths and apply human judgment to complex security challenges. "Research from Omdia shows 64% of organizations prefer the combination of agent-led penetration testing with human oversight, compared to fully manual or fully autonomous alternatives," said Mark Kuhr, co-founder and CTO of Synack. "That's the model we're delivering to customers through Sara AI Pentesting and the Synack Red Team." The finding comes from Synack-commissioned research conducted by Omdia, examining enterprise adoption of agentic AI in penetration testing. Sara AI Pentesting uses specialist agents to test for exploitable weaknesses, including injection flaws, broken access control and misconfigured network services. An attack-planning agent prioritizes likely attack paths using known adversary techniques and CVE intelligence, while a separate verification agent independently re-tests potential findings to confirm exploitability. Synack security experts review the results and associated attack chains before they reach the customer. "Security leaders need confidence that their environments have been tested thoroughly and that the findings deserve their teams' attention," said Angela Heindl-Schober, CMO of Synack. "That is why we bring agentic AI and human expertise together: to expand coverage and give customers evidence they can act on. AI finds more. Humans prove what matters. We're proud to see that approach recognized." "Synack's Platform combines agentic AI with human validation from the Synack Red Team to help organizations uncover, validate, and prioritize real exploitable risk across modern attack surfaces," said Steve Johansson, managing director, CyberSecurity Breakthrough. "We are thrilled to award Synack with 'Agentic AI Security Solution of the Year!'" In its 10th year, the 2026 awards program received thousands of nominations from organizations in more than 20 countries, representing technologies from startups to established global enterprises. About NetSPI+Synack NetSPI+Synack combine expert human testing with agentic AI to deliver continuous penetration testing and offensive security at enterprise scale. Together, NetSPI's offensive security professionals, Synack's global community of vetted researchers and Sara AI Pentesting technology identify, validate and prioritize exploitable vulnerabilities and accelerate remediation. Capabilities include penetration testing as a service (PTaaS), AI penetration testing, attack surface management, breach and attack simulation, and continuous security validation across applications, infrastructure, cloud and AI systems. With nearly 40 years of combined history and more than 13 million hours of offensive security testing, NetSPI+Synack serve enterprises and governments worldwide with one ambition: nothing left to exploit. Learn more at netspi.com and synack.com. About CyberSecurity Breakthrough Part of Tech Breakthrough, a leading market intelligence and recognition platform for global technology innovation and leadership, the CyberSecurity Breakthrough Awards program is devoted to honoring excellence in information security and cybersecurity technology companies, products and people. The CyberSecurity Breakthrough Awards provide a platform for public recognition around the achievements of breakthrough information security companies and products in categories including Cloud Security, Threat Detection, Risk Management, Fraud Prevention, Mobile Security, Web and Email Security, UTM, Firewall and more. For more information visit CyberSecurityBreakthrough.com. Tech Breakthrough LLC does not endorse any vendor, product or service depicted in our recognition programs, and does not advise technology users to select only those vendors with award designations. Tech Breakthrough LLC recognition consists of the opinions of the Tech Breakthrough LLC organization and should not be construed as statements of fact. Tech Breakthrough LLC disclaims all warranties, expressed or implied, with respect to this recognition program, including any warranties of merchantability or fitness for a particular purpose. Media Contact Katy Nally Senior Content Marketing Manager [email protected] Photos accompanying this announcement are available at

Synack
Oct 5th, 2026
Turn scanner findings into validated risk with Synack and Qualys.

Turn scanner findings into validated risk with Synack and Qualys. A year since launching Synack's integration with Qualys, the partnership now includes broader platform support, more AI-led testing, and a shared presence at Qualys ROCon Americas 2026.

Synack
Oct 2nd, 2026
What customers value in a Penetration Testing partner: insights from G2 reviews.

What customers value in a Penetration Testing partner: insights from G2 reviews. Synack was named a Leader in G2's Fall 2026 Grid(R) and Enterprise Grid(R) Reports for Penetration Testing. The reviews show what customers value in a pentesting partner: visibility into testing, access to experts, findings they can fix and verify, and a partner that acts on feedback.

GlobeNewswire
Sep 30th, 2026
Synack named a Leader in G2 Penetration Testing reports for a second consecutive season.

Synack named a Leader in G2 Penetration Testing reports for a second consecutive season. Real G2 users name Synack as a Leader in both the overall and enterprise reports, reflecting customer confidence in Synack's AI + human approach to continuous security validation. September 30, 2026 08:57 ET | Source: Synack REDWOOD CITY, Calif., Sept. 30, 2026 (GLOBE NEWSWIRE) - Synack, the AI + human penetration testing platform for continuous security validation, today announced that Synack has achieved Leader status in both the G2 Grid(R) Report for Penetration Testing | Fall 2026 and the G2 Enterprise Grid(R) Report for Penetration Testing | Fall 2026. G2 is the world's largest and most trusted data source on B2B software. This recognition is based on responses from real users to the Penetration Testing-related questions featured in the G2 review form. The Fall recognition follows Synack's Leader placement in both reports for Summer 2026. "Customer validation has always mattered, but in an AI-crowded market it has become an essential signal of trust," said Angela Heindl-Schober, Chief Marketing Officer at Synack. "Any company can make claims on its own website. Verified customer experiences help buyers and AI-powered discovery tools distinguish proven value from positioning. This recognition gives the market credible evidence that Synack customers see the difference." "With Synack, AI gives you breadth, and humans give you creativity and judgment," said Mark Kuhr, Co-Founder and Chief Technology Officer at Synack. "Sara AI Pentesting expands testing coverage at machine speed, and our researchers validate which findings are exploitable and how they chain together. Customers see the difference in the results." Synack achieved Leader status in the G2 Grid(R) Report for Penetration Testing | Fall 2026 and the G2 Enterprise Grid(R) Report for Penetration Testing | Fall 2026 by receiving positive reviews from verified users compared with similar products in the Penetration Testing category. For inclusion in the report, a product must have received 10 or more reviews. "Earning a Leader position in a G2 Report is highly competitive and rooted in verified customer reviews," said Godard Abel, co-founder and CEO, G2. "Congratulations to Synack for achieving this distinction. Buyers can be confident this ranking reflects the authentic experiences of real users." Synack holds a 4.8 out of 5 rating on G2. Reviewers highlight the value of access to vetted security researchers, continuous testing across applications and infrastructure, and reporting that helps security teams communicate results to leadership. "Having a diverse pool of vetted researchers means our applications are continuously tested by individuals with varying skill sets and areas of expertise." - Manager, Cyber Defense, Enterprise "Synack helps us validate the security of our internet-facing applications and infrastructure by providing access to skilled security researchers who identify vulnerabilities that traditional automated tools often miss." - Cybersecurity Engineering Team Leader, Enterprise About Synack Synack is the AI + human penetration testing platform for continuous security validation. Sara AI Pentesting combines agentic AI with the Synack Red Team, a rigorously vetted global community of security researchers, to expand testing coverage and prove real-world exploitability. The Synack Platform gives organizations control and visibility across testing activity, validated findings and remediation status. Synack supports point-in-time and continuous penetration testing across web applications, APIs, mobile applications, cloud and host infrastructure, internal environments and AI/LLM systems. Founded by former NSA operatives, Synack has enabled nearly 10 million hours of security testing to protect critical assets across enterprise, public-sector and highly regulated environments. Synack was recognized by both G2 and GigaOm as a Leader in Penetration Testing and PTaaS, and received Global InfoSec Awards for Market Leader in AI-Powered Cybersecurity and Trailblazer in PTaaS. Learn more at synack.com and on LinkedIn. Media Contact Katy Nally Senior Content Marketing Manager [email protected] Photos accompanying this announcement are available at:

GlobeNewswire
Sep 23rd, 2026
Synack integrates with Wiz to unify pentest findings alongside cloud security data.

Synack integrates with Wiz to unify pentest findings alongside cloud security data. The integration exports vulnerabilities discovered through the Synack PTaaS Platform into Wiz, giving security teams a single source of truth to track findings. September 23, 2026 08:00 ET | Source: Synack REDWOOD CITY, Calif., Sept. 23, 2026 (GLOBE NEWSWIRE) - Synack, the AI + human penetration testing platform for continuous security validation, today announced an integration with Wiz. The integration exports vulnerabilities discovered through the Synack Platform directly into Wiz's Penetration Test Findings view, which is part of Wiz's Unified Vulnerability Management. The integration lets Synack customers connect their Synack and Wiz environments and filter vulnerability findings by severity or tag, on a one-time or recurring daily basis. Each finding carries full context, including CWE classification, status, and first-seen and last-updated timestamps. Once connected, Synack's findings appear alongside vulnerabilities from bug bounty programs, third-party audits, internal red team exercises, and Wiz's own Red Agent and AI-driven pentest scanning in a single Penetration Test Findings view inside Wiz. This gives security teams one place to track, prioritize and remediate results, regardless of where they originated. For teams already using Wiz to manage cloud risk, the integration removes a manual step in tracking penetration test results. Because Synack supports daily exports, vulnerability findings stay current in Wiz rather than reflecting a single point-in-time snapshot. "Security teams are drowning in tools that each show a different slice of risk," said Angela Heindl-Schober, Chief Marketing Officer at Synack. "Bringing Synack's findings into Wiz provides teams a central platform to see what's been tested and validated." Synack pairs Sara AI Pentesting with the Synack Red Team, a vetted global community of security researchers, to continuously test environments and validate exploitable risk. The Wiz integration extends that data into the tools security teams already rely on for cloud risk management, supporting a continuous threat exposure management (CTEM) approach where validation feeds into discovery, prioritization and remediation. About Synack Synack is the AI + human penetration testing platform for continuous security validation. Sara AI Pentesting combines agentic AI with the Synack Red Team, a rigorously vetted global community of security researchers, to expand testing coverage and prove real-world exploitability. The Synack Platform gives organizations control and visibility across testing activity, validated findings and remediation status. Synack supports point-in-time and continuous penetration testing across web applications, APIs, mobile applications, cloud and host infrastructure, internal environments and AI or LLM systems. Founded by former NSA operatives, Synack has enabled nearly 10 million hours of security testing to protect critical assets across enterprise, public-sector and highly regulated environments. Learn more at synack.com and on LinkedIn. Angela Heindl-Schober is Chief Marketing Officer at Synack, the leading platform for human and agentic AI-powered penetration testing. With nearly three decades building and scaling global marketing organizations inside US technology companies, she has partnered with CEOs, boards, and investors to position companies for category leadership and sustained growth. Before joining Synack, Angela held senior marketing leadership roles at Vectra AI and HYCU, where she was SVP Global Marketing and a member of the Executive Leadership Team. She writes about cybersecurity strategy, CISO leadership, and what it takes to build marketing into a genuine growth engine. Media Contact Katy Nally Senior Content Marketing Manager [email protected]