AI-Powered Incident Response Engineer

Snowflake; California City (CA); On-site; USD 120,000 - 190,000; Full time

Job summary

Snowflake is hiring a Security Incident Response Engineer to strengthen our incident response program. You will pair autonomous AI agents with human judgment to detect, investigate, and contain threats across a growing cloud and AI footprint.

You will lead incident responses, develop automation, and collaborate with Legal, HR, and product teams to improve detections and guardrails while participating in on-call rotations as needed.

Qualifications

• 2+ years in incident response or security operations.
• Experience leading incidents as Incident Commander.
• Advanced experience with EDR, SIEM, SOAR, DLP across endpoints, identity, SaaS, and cloud workloads.

Responsibilities

• Join a high-impact team to scale security at a fast-growing software company.
• Deploy and refine autonomous AI agents that perform initial triage, data gathering, and rapid investigation alongside human Incident Commanders.
• Handle escalations, lead security investigations, and act as Incident Commander for critical incidents.
• Build scripts, automation pipelines, and agentic workflows to enhance incident response capabilities.
• Collaborate with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams.

Skills

Incident response

Security investigations

Python programming

Cloud security

Tools

EDR

SIEM

SOAR

DLP

Docker

Kubernetes

AI tooling

Job description

Snowflake is hiring a Security Incident Response Engineer to strengthen our incident response program. You will pair autonomous AI agents with human judgment to detect, investigate, and contain threats across a growing cloud and AI footprint.

You will lead incident responses, develop automation, and collaborate with Legal, HR, and product teams to improve detections and guardrails while participating in on-call rotations as needed.