AI-Driven Security Incident Response Engineer

Snowflake; California; On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Job summary

Snowflake is hiring a Security Incident Response Engineer to join our Incident Response team. You will help redefine how incidents are handled at scale by pairing autonomous AI agents with human judgment to detect, investigate, and contain threats across a growing cloud and AI footprint.

You will join a high-impact team of security experts, spearheading an agentic approach to IR and leading escalations and investigations as Incident Commander.

Qualifications

• 2+ years of relevant experience in incident response or security operations.
• Strong experience in incident response, security investigations, and running incidents as the Incident Commander.
• Advanced experience with security stack capabilities (EDR, SIEM, SOAR, DLP) across endpoints, identity providers, SaaS, and cloud workloads.
• Familiarity with AI/LLM tooling, security copilots, and AI-driven telemetry to accelerate investigations.
• Knowledge of securing frontier AI infrastructure including model training and serving pipelines.

Responsibilities

• Join a high-impact team of security experts to scale security at a fast-growing software company.
• Spearhead an agentic approach to Incident Response with autonomous AI agents and human judgment.
• Handle escalations, lead security investigations, and act as Incident Commander for critical incidents.
• Build scripts, automation pipelines, and agentic workflows to enhance incident response capabilities.
• Partner with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams.
• Create and improve detections, threat signatures, and guardrails for traditional and AI-driven threats.
• Participate in periodic on-call rotation, including non-traditional hours.

Skills

Incident response

Security investigations

Python

Cloud security

AI tooling

Incident Commander

EDR

SIEM

SOAR

Docker

Kubernetes

AWS

GCP

Azure

Education

Bachelor's degree or equivalent

Tools

AWS

GCP

Azure

Docker

Kubernetes

EDR

SIEM

SOAR

DLP

Job description

Snowflake is hiring a Security Incident Response Engineer to join our Incident Response team. You will help redefine how incidents are handled at scale by pairing autonomous AI agents with human judgment to detect, investigate, and contain threats across a growing cloud and AI footprint.

You will join a high-impact team of security experts, spearheading an agentic approach to IR and leading escalations and investigations as Incident Commander.