Staff Security Engineer: Threat Detection (Remote)

Snowflake; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Snowflake is hiring a Staff Security Engineer, Threat Detection to advance our AI-powered threat detection program across Snowflake's cloud platform. You will design, implement, and operate detections and automation, partnering with Security and Engineering to scale coverage and reduce mean time to detect.

You should have 8+ years in security engineering, strong Python/Go coding, and experience handling large-scale logs.

Qualifications

• 8+ years of security engineering experience across threat detection, incident response, threat hunting, product security, or related.
• Strong coding ability in Python or Go, with a track record of building software or automations.
• Experience handling data programmatically (SQL, Python) with large-scale logs and telemetry.

Responsibilities

• Develop and deploy detections using modern engineering practices (CI/CD, testing, detections as code).
• Mature threat detection program by analyzing coverage gaps and mitigating risks with AI/ML where appropriate.
• Make data-driven recommendations for detective and preventative controls based on threat models and data exploration.
• Design and build automations and AI-driven workflows to strengthen security posture.
• Build and maintain partnerships to deliver detection as a service with reusable components.
• Continuously measure detection quality across coverage, precision/recall, and latency.

Skills

Security engineering

Python

Go

Threat detection

Incident response

CI/CD

Cloud services

Data tooling

Agent-based workflows

AWS/GCP/Azure

Education

BS in CS or related

Tools

Terraform

CloudFormation

LangGraph

Detections-as-code

Job description

Snowflake is hiring a Staff Security Engineer, Threat Detection to advance our AI-powered threat detection program across Snowflake's cloud platform. You will design, implement, and operate detections and automation, partnering with Security and Engineering to scale coverage and reduce mean time to detect.

You should have 8+ years in security engineering, strong Python/Go coding, and experience handling large-scale logs.