AI-Driven Security Incident Response Engineer

Snowflake; California; On-site; USD 143,000 - 206,000; Full time

Job summary

Snowflake is seeking a Security Incident Response Engineer to join our Incident Response team. You will redefine how incidents are handled at scale by pairing autonomous AI agents with human judgment to detect, investigate, and contain threats across our cloud and AI footprint.

As part of a high-impact security group, you will build automation pipelines, agentic workflows, and detections that accelerate investigations while collaborating with Threat Detection, Product Security, Legal, HR, Cloud,

Qualifications

• 2+ years in incident response or security operations.
• Experience leading incidents as Incident Commander.
• Hands-on with EDR/SIEM/SOAR/DLP across endpoints, identity, SaaS, and cloud.
• Proficiency in Python for automating workflows.
• Experience with AWS, GCP, or Azure and container tech like Docker/Kubernetes.
• Ability to translate findings into tactical fixes and long-term security goals.
• Static and dynamic malware analysis in sandbox environments with AI-assisted tools.

Responsibilities

• Join a high-impact team to scale security at a fast-growing software company.
• Lead agentic incident response by deploying autonomous AI agents with human oversight.
• Handle escalations, lead investigations, and act as Incident Commander for critical incidents.
• Build automation pipelines and agentic workflows to enhance detection and response.
• Collaborate with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams.
• Develop detections, threat signatures, and guardrails for traditional and AI-driven threats.
• Participate in on-call rotations, potentially outside standard hours.

Skills

Incident response

Security investigations

Python

Cloud security

Incident Commander

AI/LLM tooling

Education

Security certifications (optional)

Tools

EDR

SIEM

SOAR

DLP

Docker

Kubernetes

Job description

Snowflake is seeking a Security Incident Response Engineer to join our Incident Response team. You will redefine how incidents are handled at scale by pairing autonomous AI agents with human judgment to detect, investigate, and contain threats across our cloud and AI footprint.

As part of a high-impact security group, you will build automation pipelines, agentic workflows, and detections that accelerate investigations while collaborating with Threat Detection, Product Security, Legal, HR, Cloud,