Staff Security Engineer - Threat Detection

Other Jobs To Apply

<p>At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.</p><p>We are hiring a Staff Security Engineer, Threat Detection for our Security team. This is a fully remote role open to candidates across the United States. As Snowflake scales globally, we are investing heavily in AI-powered threat detection and response to protect our customers and our environment at cloud scale. This role helps enhance and extend the reach of Snowflake's Threat Detection Program, with AI and automation as core primitives in how we detect, triage, and respond to threats. You will combine deep security expertise with strong engineering skills to build, maintain, and evolve detections and the pipelines that support them, partnering with stakeholders across Security and Engineering to make informed, data-driven decisions grounded in threat models, proactive threat hunts, and exploration of logs and telemetry.</p><h3>AS A STAFF SECURITY ENGINEER, THREAT DETECTION AT SNOWFLAKE, YOU WILL:</h3><ul><li><p>Develop and deploy detections using modern engineering practices (testing and validation, CI/CD pipelines, detections as code, and a full detection development lifecycle), spanning both rules-based and AI-assisted detections.</p></li><li><p>Mature our threat detection program by analyzing coverage gaps and mitigating risks through detective controls, experimenting with AI/ML approaches where they improve signal-to-noise ratio or analyst efficiency.</p></li><li><p>Make data-driven recommendations for detective and preventative controls based on threat models, proactive threat hunts, and data science-oriented exploration of logs and telemetry.</p></li><li><p>Design and build automations and AI-driven workflows that strengthen our security posture and reduce mean time to detect and respond.</p></li><li><p>Build and maintain strong partnerships with stakeholders to deliver detection as a service, including self-service patterns, reusable components, and AI-enhanced detections that support their domains.</p></li><li><p>Continuously measure and improve detection quality across coverage, precision and recall, false positive rate, and latency.</p></li></ul><h3>OUR IDEAL STAFF SECURITY ENGINEER WILL HAVE:</h3><ul><li><p>8+ years of security engineering experience across one or more of threat detection, incident response, threat hunting, product security, or corporate security, or equivalent experience.</p></li><li><p>Strong coding ability in a high-level language such as Python or Go, with a track record of building software, data tooling, or automations, and a desire to apply those skills to AI/ML-powered detection and response.</p></li><li><p>Experience handling data programmatically (SQL, Python), ideally including large-scale log and telemetry datasets used for detection logic or analytics.</p></li><li><p>Experience writing production code, including unit tests, version control, and CI/CD integration.</p></li><li><p>Experience developing and operating agent-based or agentic workflows (for example, LangGraph or similar orchestration frameworks).</p></li><li><p>Hands-on experience with at least one major cloud provider (AWS, Azure, or GCP) and a solid understanding of its native logging, monitoring, and security services.</p></li><li><p>Familiarity with the risks that impact SaaS products and workstations, such as account compromise, data exfiltration, phishing, and supply chain attacks.</p></li><li><p>A risk-based approach that helps prioritize key security initiatives and judge when AI provides meaningful value over traditional rules and heuristics, paired with a humble, team-oriented mindset in a zero-ego environment.</p></li></ul><h3>BONUS POINTS FOR THE FOLLOWING:</h3><ul><li><p>Computer Science degree or equivalent practical experience.</p></li><li><p>Experience applying GenAI and LLM-based approaches to security workflows, such as detection engineering, alert triage, enrichment, or summarization.</p></li><li><p>Experience with infrastructure as code (Terraform, CloudFormation) and/or detections-as-code frameworks.</p></li><li><p>Experience building and maintaining production software or platforms that process high-volume data streams (logs, metrics, traces) or power security analytics.</p></li><li><p>Experience deploying detections at global scale.</p></li><li><p>Experience with Snowflake or equivalent cloud data platforms, including building data pipelines or analytics that support security workloads, and interest in Snowflake Cortex AI or similar in-platform AI capabilities.</p></li></ul><h3>WHY JOIN OUR SECURITY TEAM AT SNOWFLAKE?</h3><p>We are laser focused on doing security in the agentic era, and we do not tolerate the status quo. We have strong demand from our customers and strong support from the business for security, which gives us both the mandate and the runway to invest in next-generation, AI-driven detection and response capabilities. You will join a team with a diverse set of backgrounds and skills, excited to add engineers who want to push the frontier of AI in security and solve threat detection at global scale, leveraging Snowflake's own data platform and AI capabilities to build detections and workflows that meaningfully raise the bar for defenders. And did we mention we are one of the fastest-growing software companies ever? The opportunity for impact, on both Snowflake and the broader security ecosystem, is enormous.</p><p>Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.</p><p>How do you want to make your impact?</p><p>For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: <a target="_blank" rel="noopener noreferrer nofollow" href="http://careers.snowflake.com">careers.snowflake.com</a></p><p>The following represents the expected range of compensation for this role:<ul><li> The estimated base salary range for this role is $211,000 - $303,600.</li><li>Additionally, this role is eligible to participate in Snowflake’s bonus and equity plan.</li></ul></p><p>The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. This role is also eligible for a competitive <a class="benefits_link" href="https://careers.snowflake.com/us/en/benefits" target="_blank">benefits</a> package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.</p><p>To comply with pay transparency requirements and other statutes, you can notify us if you believe that a job posting is not compliant by completing this <a class="benefits_link" href="https://docs.google.com/forms/d/e/1FAIpQLSfLgZaN7w6vEPtyK_M8dwrdT4Vue0fn-s1_KCq4rCACJ_lV3g/viewform" target="_blank">form.</a></p>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...