Staff Security Engineer - Threat Detection

Overview

Staff Security Engineer focused on Threat Detection for Snowflake’s Security team, enhancing AI-powered detection and response through detections, automations, and data-driven improvements.

What you'll do

• Develop and deploy rules-based and AI-assisted detections using testing, validation, CI/CD, and detections-as-code.
• Analyze threat detection coverage gaps and mitigate risks using detective controls and AI/ML experiments.
• Recommend detective and preventative controls using threat models, proactive hunts, and exploration of logs and telemetry.
• Design automations and AI-driven workflows to strengthen security posture and reduce mean time to detect/respond.
• Deliver detection as a service by building self-service patterns and reusable components for stakeholders.
• Continuously measure and improve detection quality using metrics such as coverage, precision/recall, false positives, and latency.

What you'll need

• 8+ years of security engineering experience in threat detection, incident response, threat hunting, product security, or corporate security.
• Strong coding ability in a high-level language such as Python or Go.
• Programmatic data handling experience using SQL and Python, including large-scale log/telemetry datasets.
• Production coding experience with unit tests, version control, and CI/CD integration.
• Experience with agent-based or agentic workflows (e.g., LangGraph or similar orchestration frameworks).
• Hands-on experience with a major cloud provider (AWS, Azure, or GCP) and its logging/monitoring/security services.

Details

• Fully remote role with eligibility for candidates across the United States.