Senior Security Engineer, Incident Response

Snowflake; Bellevue (KY); Remote; USD 180,000 - 230,000; Full time

Benefits offered by this job

Comprehensive health insurance plans

Health savings accounts

Robust retirement plans

Life and disability insurance

Employee stock purchase plan (ESPP)

Quarterly bonus or commission program

Job summary

Snowflake is hiring a Senior Security Engineer dedicated to Product Security Incident Response. You will lead and architect Snowflake’s product-integrated IR strategy, with a primary focus on AI and LLM security.

You’ll design, plan, and drive incident response across Snowflake’s AI product surface, including Cortex AI, Cortex Agents, Snowflake Intelligence, and data pipelines powering them. You’ll lead incident response for AI-related security events, addressing prompt injection, model abuse,

Qualifications

• Bachelor's degree in Computer Science or a related field; equivalent experience accepted.
• 5+ years of information security experience, focusing on incident response, security engineering, or product security.
• Experience securing AI/ML infrastructure and AI feature pipelines; knowledge of LLM security is a plus.
• Familiarity with cloud-native environments (AWS, Azure, GCP) and related threat landscapes.

Responsibilities

• Lead incident response for product-level security events with a focus on AI/ML risks.
• Architect and drive Snowflake's IR strategy across Cortex AI, Cortex Agents, and Snowflake Intelligence.
• Develop detection, containment, and remediation playbooks for AI misuse and adversarial inputs.
• Embed IR requirements from design through deployment in AI product pipelines.
• Represent IR to cloud engineering, AI platform teams, and customer-facing units.
• Build tooling to accelerate detection and response at Snowflake scale.

Skills

Strong communication skills

Empathy for developer experience

SQL proficiency

Experience leading security program

Cloud environments knowledge

CI/CD understanding

Threat modeling

AI/ML security

Education

Bachelor’s degree in Computer Science or related field

Tools

Python

Job description

• We are hiring a Senior Security Engineer, dedicated to Product Security Incident Response
• In this role, you will lead and architect Snowflake’s product-integrated Incident Response strategy, with a primary focus on AI and LLM security
• You’ll design, plan, and drive the implementation of incident response capabilities across Snowflake’s AI product surface - including Cortex AI, Cortex Agents, Snowflake Intelligence, and the data pipelines that power them
• Lead incident response for product-level security events, with deep focus on AI-specific threat vectors including prompt injection, model abuse, agent hijacking, and data exfiltration through AI workloads
• Integrate IR into AI product pipelines - work directly with teams shipping Cortex features, Snowflake Intelligence, and AI-powered developer experiences to embed security requirements from design through deployment
• Develop and codify our AI abuse response strategy - defining detection, containment, and remediation playbooks for LLM misuse, adversarial inputs, and AI-assisted attacks targeting Snowflake customers
• Address tech debt across the AI product stack, ensuring that new Cortex and agentic architectures meet IR readiness requirements from the ground up
• Represent the IR team to cloud engineering, AI platform teams, corporate security, and customer-facing business units
• Secure modern AI-native codebases operating across multi-cloud environments - including container-based inference services, RAG pipelines, vector stores, and agent orchestration layers
• Partner with world-class AI and security engineering teams, providing expert guidance on secure architecture for high-impact AI features and customer-facing AI capabilities
• Design and manage response capabilities built into Snowflake’s AI operational infrastructure - from model serving endpoints to Cortex Search indexes and Snowpark ML pipelines
• Lead with data, code, and automation - build tooling that accelerates detection and response for product security incidents at Snowflake scale
• Drive meaningful security outcomes for the customers and enterprises trusting Snowflake with their most sensitive data and AI workloads

Benefits

• Comprehensive health insurance plans
• Health savings accounts
• Robust retirement plans
• Life and disability insurance
• Weekly online lunch and learns
• Virtual workout classes
• Ergonomic work-from-home equipment
• On-demand mental health and wellness programs
• Fertility benefits and family planning resources
• Generous time-off and various leave plans
• Onsite and Remote Work
• Employee discounts and pre-tax selections
• New hire equity + Employee Stock Purchase Plan (ESPP)
• Quarterly bonus or commission program

• Strong communication skills, with the ability to translate security risk into actionable guidance for product teams
• Empathy for developer experience, helping AI engineers ship securely rather than slowing them down
• SQL proficiency, plus experience building automation and tools with common programming languages (Python preferred)
• Experience leading or actively building an application or security engineering program, with a clear point of view on securing AI/ML systems
• Direct experience serving as incident commander for product focused security incidents
• Working knowledge of cloud-native environments (AWS, Azure, GCP) and the threat landscape specific to SaaS and AI platforms
• 5+ years of experience in information security, primarily in incident response, security engineering, or product/application security (preferred)
• Experience with threat modeling and security testing across AI attack surfaces, including prompt injection, indirect injection, model inversion, embedding extraction, and supply chain attacks on AI dependencies
• Bachelor’s degree in Computer Science or a related field, or equivalent experience
• Familiarity with the unique data governance and security challenges introduced by LLMs, RAG architectures, and agentic systems
• Experience securing AI/ML infrastructure, including model serving, vector databases, embedding pipelines, API gateways, and LLM-integrated application architectures
• Experience building agentic incident response capabilities, including skills, agents, and pipelines
• Familiarity with CI/CD and secure release lifecycle patterns, with an emphasis on building security into AI feature pipelines
• Understanding of current attacker TTPs, including emerging AI-specific techniques such as adversarial ML, agent manipulation, and LLM jailbreaking in enterprise contexts
• Preferred certifications: GCIA, GCIH, GCSA, GDAT, CISSP/GISP, or cloud certifications (AWS, Azure, GCP)