Senior Security Engineer, Snowflake

• Experience in writing detections, threat hunting, or responding to incidents across various platforms
• Solid experience writing code—whether that’s in software engineering, data engineering, or building automations
• Experience collaborating with various security teams and stakeholders to build and maintain detections
• Ability to review and analyze logging and observability requirements to support detection and response capabilities
• A risk based approach to security in order to assist with prioritizing key security initiatives
• Knowledge of the current security landscape with domain knowledge in a number of areas
• Automation first approach to scale security
• Be a humble, team player prioritizing team success in a zero-ego environment
• Experience with development in a high level programming language (Go, Python, etc)
• Experience with handling data programmatically (SQL, Python, etc)
• Experience writing detections as code for organization specific risks
• Experience with one of the major cloud providers (AWS, Azure, GCP)
• Familiarity with the risks that impact SaaS products and workstations

Desirable

• Snowflake has developed a world class cloud data platform that is effective, affordable and accessible to all data users. You will be responsible for helping to enhance Snowflake’s Threat Detection Program and extending the reach and impact of Threat Detection here at Snowflake
• The ideal candidate will seek to gain a strong understanding of the Snowflake Product and Corporate environment to create and optimize detections that mitigate risks identified. You will partner with stakeholders across security making informed, knowledgeable and data driven decisions based on threat models or proactive threat hunts
• You will make recommendations for detective and preventative controls, and build automations to enhance our security posture
• Develop and deploy detections using engineering practices (testing/validation, CI/CD pipelines, detections as code, detection development lifecycle, etc.)
• Mature our threat detection program by analyzing gaps and mitigating risks via detective controls
• Build and maintain strong partnerships with our stakeholders to provide detection as a service
• Improve our team by building the next generation of detection engineering capabilities (graph-based monitoring, in-house SIEM development, etc)