Sr. Engineer, Incident Response
Build the future of data. Join the Snowflake team.
AS AN INCIDENT RESPONSE ENGINEER AT SNOWFLAKE YOU WILL:
- Join a high impact team of security experts to scale security at one of the fastest-growing software companies ever
- Work the nightshift (7pm - 4am PT) to handle escalations, and lead security investigations and incidents as Incident Commander
- Maintain playbooks and develop comprehensive and well-structured incident reports
- Build scripts, tools, and methodologies to enhance Snowflake incident response
- Partner closely with our Threat Detection, Automation, ProductSecurity, Legal, HR, Cloud and Data teams
- Create and improve detections and threat signatures
- Participate in on-call rotation periodically which may involve non-traditional working hours
OUR IDEAL INCIDENT RESPONSE ENGINEER WILL HAVE:
- Strong experience in IR, security investigations, and running incidents as the incident commander
- Experience using investigative tools such as EDR, DLP, SIEM, and SOAR
- Automation experience in Python and be comfortable with SQL
- Excellent understanding of cloud security
- Ability to convert long term strategy into short and long-term objectives
- Significant experience leading security projects
- Knowledge of network and web protocols, and an in-depth knowledge of Linux/Unix tools and architecture
- Experience conducting forensics investigations on Unix or Windows hosts
- Knowledge of dynamic and static malware analysis