Incident Response Engineer

🕒 October 16

🏄 California – Remote

🏄 California – Remote

💵 $143k - $205.8k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Snowflake

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2012

☁️ SaaS

🏢 Enterprise

🤝 B2B

SaaS • Enterprise • B2B

Snowflake is a cloud-based data platform and data warehouse-as-a-service. It enables organizations to store, process, analyze, and share large volumes of structured and semi-structured data across multiple clouds, with separated scalable compute and storage, built-in security and data-sharing capabilities, and support for analytics and machine-learning workloads. Snowflake is delivered as a managed SaaS offering for enterprise customers and is primarily marketed and sold as a B2B product.

📋 Description

• Join a high-impact security team scaling security at Snowflake • Deploy, guide, and refine autonomous AI agents for initial triage, context gathering, and rapid investigation • Handle escalations and lead security investigations • Act as Incident Commander for critical incidents • Build scripts, automation pipelines, and agentic workflows to improve incident response • Partner with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams • Create and improve detections, threat signatures, and guardrails for traditional and AI-driven attack vectors • Participate in a periodic on-call rotation • Translate incident findings and root-cause analysis into tactical fixes and long-term security engineering objectives • Turn incident learnings into lasting improvements to Snowflake’s security

🎯 Requirements

• 2+ years of relevant experience in incident response or security operations preferred • Strong experience in incident response, security investigations, and running incidents as the Incident Commander • Advanced experience using EDR, SIEM, SOAR, and DLP across endpoints, identity providers, SaaS, and cloud workloads • Deep familiarity with AI/LLM tooling, security copilots, and AI-driven telemetry • Knowledge of securing frontier AI infrastructure, including model training and serving pipelines and AI agent permissions • Proven ability to detect and respond to modern AI-driven attacks • Proficiency in Python • Expert-level understanding of cloud security architectures (AWS, GCP, or Azure) • Experience with container runtime isolation (Docker, Kubernetes) • Ability to translate incident findings and root-cause analysis into tactical fixes and long-term security engineering objectives • Ability to perform static and dynamic malware analysis using sandbox environments and AI-assisted reverse engineering tools • Experience with threat hunting or detection-as-code programs • Experience running sensitive investigations alongside Legal and HR • Familiarity with large-scale data platforms and security telemetry analysis • Contributions to open-source security tooling, detection rules, or the security community • Industry certifications such as GCIH, GCFA, or GREM are a bonus • Ability to participate in a periodic on-call rotation, including non-traditional working hours

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • 401(k) retirement plan • Flexible spending account • Health savings account • At least 12 paid holidays • Paid time off • Parental leave • Employee assistance program • Bonus plan eligibility • Equity plan eligibility

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume