SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Snowflake is seeking a Staff Security Engineer focused on Threat Detection to join its Security team. This fully remote role is based in the United States and plays a critical part in Snowflake's investment in AI-powered threat detection and response at cloud scale.
In this position, you will develop and deploy advanced detections using modern engineering practices, including testing, validation, CI/CD pipelines, and detections-as-code frameworks. You'll mature Snowflake's threat detection program by analyzing coverage gaps, experimenting with AI/ML approaches to improve signal-to-noise ratios, and making data-driven recommendations based on threat models and proactive threat hunts. A key responsibility is designing and building automations and AI-driven workflows that strengthen security posture and reduce mean time to detect and respond.
You will partner closely with stakeholders across Security and Engineering to deliver detection as a service, including self-service patterns and reusable components. You'll continuously measure and improve detection quality across coverage, precision, recall, false positive rate, and latency.
Required qualifications include 8+ years of security engineering experience in threat detection, incident response, threat hunting, product security, or corporate security. You need strong coding ability in Python or Go, with a track record of building software, data tooling, or automations. Experience handling data programmatically (SQL, Python) with large-scale log and telemetry datasets is essential. You should have production code experience including unit tests, version control, and CI/CD integration, plus hands-on experience with at least one major cloud provider (AWS, Azure, GCP) and understanding of its native logging and security services.
Bonus qualifications include a Computer Science degree, experience applying GenAI and LLM-based approaches to security workflows, infrastructure-as-code experience (Terraform, CloudFormation), experience building production platforms processing high-volume data streams, and familiarity with Snowflake or equivalent cloud data platforms.
