Principal Security Engineer – Threat Intelligence

Emploi pas sur LinkedIn

🕒 il y a 8 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Snowflake

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 2012

☁️ SaaS

🏢 Entreprise

🤝 B2B

SaaS • Enterprise • B2B

Snowflake est une plateforme de données cloud et un entrepôt de données en tant que service. Elle permet aux organisations de stocker, traiter, analyser et partager de grands volumes de données structurées et semi-structurées sur plusieurs clouds, avec une décomposition scalable des capacités de calcul et de stockage, une sécurité intégrée et des capacités de partage de données, ainsi qu'un support pour les charges de travail analytiques et d'apprentissage automatique. Snowflake est proposé en tant que SaaS géré pour les clients entreprises et est principalement commercialisé et vendu en tant que produit B2B.

Description

• Help define and mature the strategy for Threat Intelligence at Snowflake, including where the program should invest in people, processes, engineering, and AI-enabled capabilities. • Identify, profile, and track threat actors targeting Snowflake, our customers, partners, and ecosystem, and translate that intelligence into relevant, actionable outcomes. • Operationalize threat intelligence to help prioritize security initiatives and drive action with the relevant security teams and stakeholders. • Produce high-quality intelligence reports, assessments, briefs, and leadership-ready communications based on external events, internal requirements, and proactive research. • Engineer solutions that improve the efficiency, scale, and impact of the Threat Intelligence program, including automations, collection pipelines, enrichment workflows, and analyst tooling. • Build and improve AI-assisted intelligence workflows for tasks such as report triage, signal enrichment, summarization, vendor/customer monitoring, and threat-informed hunts, with strong measurement and quality. • Partner closely with Threat Detection, Incident Response, and other security teams to convert intelligence into detections, threat hunts, investigative pivots, and control recommendations. • Monitor alerts, intelligence feeds, vendor reporting, and external developments for threat events that may affect Snowflake. • Drive standards for how intelligence is curated, evaluated, delivered, and measured so the program remains high-signal, timely, and scalable. • Mentor other engineers and analysts by raising the team’s technical depth, analytic rigor, and operational maturity.

🎯 Exigences

• Deep experience in threat intelligence, with strong background in several of: adversary intelligence, intrusion intelligence, supply-chain intelligence, identity intelligence, domain intelligence, and threat-informed defense. • Strong understanding of today’s threat actor ecosystem, including nation-state actors, criminal organizations, ransomware groups, fraud ecosystems, and the platforms and communities that enable them. • Demonstrated ability to operationalize threat intelligence and influence security priorities in partnership with detection, incident response, product security, cloud security, anti-abuse, and other stakeholders. • Strong engineering skills, including experience writing code in high-level languages such as Python or Go, building automations, and working with data-heavy security workflows. • Experience building or driving AI-assisted workflows for intelligence analysis, research triage, summarization, collection, prioritization, or investigative support, and good judgment about where AI adds value versus where human analysis is required. • Ability to research threat actors’ TTPs, infrastructure, targets, and objectives, and map those risks to Snowflake’s product, enterprise, and customer environment. • Experience with OSINT tools, data sources, investigative methodologies, and intelligence reporting for technical and executive audiences. • Strong understanding of threat hunting and threat detection methodologies, and the ability to turn intelligence into hunts, detection opportunities, and control recommendations. • A risk-based approach to security, with the ability to prioritize work based on business impact and evolving threat conditions. • A humble, team-oriented mindset with a bias toward collaboration, execution, and raising the bar for the broader team.

🏖️ Avantages

• medical, dental, vision, life, and disability insurance • 401(k) retirement plan • flexible spending & health savings account • at least 12 paid holidays • paid time off • parental leave • employee assistance program • other company benefits