Lead AI Security Incident Response Engineer

Snowflake; Menlo Park (CA); On-site; USD 176,000 - 253,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) retirement plan

Paid time off & holidays

Job summary

Snowflake is seeking a Senior Security Engineer for Incident Response to lead product-level security incident response across AI surfaces, including Cortex AI and Snowflake Intelligence. You will embed security requirements from design to deployment, and guide playbooks for AI misuse and adversarial inputs.

The role emphasizes IR leadership, threat modeling, cloud environments, and collaboration with AI and security teams to secure Snowflake's AI-enabled products and data workloads.

Qualifications

• 5+ years of information security, incident response, security engineering, or product security.
• Experience serving as incident commander for product-focused incidents.
• Experience leading or building an application/security program with AI/ML security focus.
• Experience with threat modeling and testing AI attack surfaces.

Responsibilities

• Lead incident response for product-level security events with focus on AI threats.
• Integrate IR into AI product pipelines across Cortex features and Snowflake Intelligence.
• Develop playbooks for LLM misuse and AI-assisted attacks.
• Address tech debt to ensure IR readiness in Cortex and agentic architectures.
• Represent IR to cloud engineering, AI platform, security, and business units.

Skills

Incident response

Security engineering

Product security

Threat modeling

AI/ML security

Cloud platforms

Python

SQL

Communication

Developer empathy

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Azure

GCP

Job description

Snowflake is seeking a Senior Security Engineer for Incident Response to lead product-level security incident response across AI surfaces, including Cortex AI and Snowflake Intelligence. You will embed security requirements from design to deployment, and guide playbooks for AI misuse and adversarial inputs.

The role emphasizes IR leadership, threat modeling, cloud environments, and collaboration with AI and security teams to secure Snowflake's AI-enabled products and data workloads.