Threat Intelligence Engineer — Detect & Defend Endpoints

Snap Inc.; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Paid parental leave

Comprehensive medical coverage

Mental health support

Job summary

Snap Inc. is seeking a Threat Intelligence focused security engineer to join the Detection and Response team in Sydney. You will identify adversary TTPs, track threat actors, and build scalable detection capabilities across cloud and on-prem environments.

You will develop in Python and/or Go, work with macOS and Windows internals, and coordinate incident response with global teams. This role emphasizes research, automation, and impact on a platform serving hundreds of millions of users.

Qualifications

• Bachelor degree in CS, Engineering, IS or equivalent.
• 3+ years in incident response / detection engineering or related security fields.
• Strong development skills in Python and/or Go.
• Experience with macOS and Windows internals.
• Cloud experience with AWS.

Responsibilities

• Identify, analyze, and develop threat intelligence on emerging adversary TTPs across APT and cybercrime ecosystems.
• Proactively track, model, and monitor threat actors and campaigns that may impact Snap Inc.
• Research and innovate detection and response capabilities, developing tools and automations for threat hunting and incident response.
• Leverage AI and automation to build scalable intelligence and response systems.
• Design and implement logging and alerting to detect malicious activity across endpoints, infrastructure, networks, and cloud.
• Lead and coordinate incident response efforts across multiple Snap teams.
• Partner with global stakeholders to improve detection, intelligence, and response capabilities.

Skills

Python

Go

Threat intelligence

Threat hunting

Digital forensics

Malware analysis

Incident response

IDS/IPS

Education

Bachelor of Science in CS/Engineering/IS

Tools

AWS

Job description

Snap Inc. is seeking a Threat Intelligence focused security engineer to join the Detection and Response team in Sydney. You will identify adversary TTPs, track threat actors, and build scalable detection capabilities across cloud and on-prem environments.

You will develop in Python and/or Go, work with macOS and Windows internals, and coordinate incident response with global teams. This role emphasizes research, automation, and impact on a platform serving hundreds of millions of users.