Principal Security Engineer – Threat Intelligence

Stelle nicht auf LinkedIn

🕒 vor 4 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Snowflake

WebsiteLinkedInAlle Stellen

5001 - 10000 Mitarbeiter

Gegründet 2012

☁️ SaaS

🏢 Unternehmen

🤝 B2B

SaaS • Enterprise • B2B

Snowflake ist eine cloudbasierte Datenplattform und Data-Warehouse-as-a-Service. Sie ermöglicht es Organisationen, große Volumen an strukturierten und semi-strukturierten Daten in mehreren Clouds zu speichern, zu verarbeiten, zu analysieren und zu teilen, mit separierten skalierbaren Rechen- und Speicherressourcen, integrierter Sicherheit und Funktionen zum Datenaustausch sowie Unterstützung für Analyse- und Machine-Learning-Workloads. Snowflake wird als verwaltetes SaaS-Angebot für Unternehmenskunden bereitgestellt und wird hauptsächlich als B2B-Produkt vermarktet und verkauft.

Beschreibung

• Help define and mature the strategy for Threat Intelligence at Snowflake, including where the program should invest in people, processes, engineering, and AI-enabled capabilities. • Identify, profile, and track threat actors targeting Snowflake, our customers, partners, and ecosystem, and translate that intelligence into relevant, actionable outcomes. • Operationalize threat intelligence to help prioritize security initiatives and drive action with the relevant security teams and stakeholders. • Produce high-quality intelligence reports, assessments, briefs, and leadership-ready communications based on external events, internal requirements, and proactive research. • Engineer solutions that improve the efficiency, scale, and impact of the Threat Intelligence program, including automations, collection pipelines, enrichment workflows, and analyst tooling. • Build and improve AI-assisted intelligence workflows for tasks such as report triage, signal enrichment, summarization, vendor/customer monitoring, and threat-informed hunts, with strong measurement and quality. • Partner closely with Threat Detection, Incident Response, and other security teams to convert intelligence into detections, threat hunts, investigative pivots, and control recommendations. • Monitor alerts, intelligence feeds, vendor reporting, and external developments for threat events that may affect Snowflake. • Drive standards for how intelligence is curated, evaluated, delivered, and measured so the program remains high-signal, timely, and scalable. • Mentor other engineers and analysts by raising the team’s technical depth, analytic rigor, and operational maturity.

🎯 Anforderungen

• Deep experience in threat intelligence, with strong background in several of: adversary intelligence, intrusion intelligence, supply-chain intelligence, identity intelligence, domain intelligence, and threat-informed defense. • Strong understanding of today’s threat actor ecosystem, including nation-state actors, criminal organizations, ransomware groups, fraud ecosystems, and the platforms and communities that enable them. • Demonstrated ability to operationalize threat intelligence and influence security priorities in partnership with detection, incident response, product security, cloud security, anti-abuse, and other stakeholders. • Strong engineering skills, including experience writing code in high-level languages such as Python or Go, building automations, and working with data-heavy security workflows. • Experience building or driving AI-assisted workflows for intelligence analysis, research triage, summarization, collection, prioritization, or investigative support, and good judgment about where AI adds value versus where human analysis is required. • Ability to research threat actors’ TTPs, infrastructure, targets, and objectives, and map those risks to Snowflake’s product, enterprise, and customer environment. • Experience with OSINT tools, data sources, investigative methodologies, and intelligence reporting for technical and executive audiences. • Strong understanding of threat hunting and threat detection methodologies, and the ability to turn intelligence into hunts, detection opportunities, and control recommendations. • A risk-based approach to security, with the ability to prioritize work based on business impact and evolving threat conditions. • A humble, team-oriented mindset with a bias toward collaboration, execution, and raising the bar for the broader team.

🏖️ Vorteile

• medical, dental, vision, life, and disability insurance • 401(k) retirement plan • flexible spending & health savings account • at least 12 paid holidays • paid time off • parental leave • employee assistance program • other company benefits