AI-Driven Security Incident Response Engineer

OpenKrill; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Snowflake is hiring a Security Incident Response Engineer to join our Incident Response team. You will help redefine how incidents are handled at scale by pairing autonomous AI agents with human judgment to detect, investigate, and contain threats across our cloud footprint.

In this role you will lead high-impact incident responses as an Incident Commander, develop automated workflows, and collaborate with Threat Detection, Product Security, Legal, HR, Cloud, and Data teams to strengthen

Qualifications

• 2+ years of incident response or security operations experience.
• Experience leading incidents as the Incident Commander.
• Advanced experience with EDR, SIEM, SOAR, DLP across endpoints, identity, SaaS, and cloud workloads.
• Familiarity with AI/LLM tooling and AI-driven telemetry for investigations.
• Knowledge of securing frontier AI infrastructure and model pipelines.
• Proficiency in Python to automate security workflows.
• Strong understanding of cloud security architectures (AWS, GCP, Azure) and container isolation (Docker/Kubernetes).
• Ability to translate findings into short-term fixes and long-term security objectives.
• Experience with static and dynamic malware analysis in sandbox environments.

Responsibilities

• Join a high-impact security team to scale security at a fast-growing software company.
• Deploy, guide, and refine autonomous AI agents that perform initial triage and rapid investigations with human Incident Commanders.
• Handle escalations, lead security investigations, and act as Incident Commander for critical incidents.
• Build scripts, automation pipelines, and agentic workflows to enhance incident response capabilities.
• Partner with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams.
• Create and improve detections, threat signatures, and guardrails for traditional and AI-driven attacks.
• Participate in periodic on-call rotations, which may involve non-traditional hours.

Skills

Python

Security tooling

AI tooling

Cloud security

Incident commander

Malware analysis

Docker/Kubernetes

Threat telemetry

Tools

Docker

Kubernetes

EDR

SIEM

SOAR

DLP

Job description

Snowflake is hiring a Security Incident Response Engineer to join our Incident Response team. You will help redefine how incidents are handled at scale by pairing autonomous AI agents with human judgment to detect, investigate, and contain threats across our cloud footprint.

In this role you will lead high-impact incident responses as an Incident Commander, develop automated workflows, and collaborate with Threat Detection, Product Security, Legal, HR, Cloud, and Data teams to strengthen