Incident Response Engineer

Job not on LinkedIn

🔥 6 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $143k - $205.8k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Snowflake

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2012

💼 Consulting

📣 Marketing

Consulting • Marketing • Cloud Computing

Snowflake is a cloud-based data-warehousing company that provides a platform for data storage, processing, and analytics. It allows businesses to store data in a centralized location and perform complex queries and analytics on that data efficiently. Snowflake is designed to handle a wide range of data workloads and can scale dynamically to meet the needs of growing businesses.

📋 Description

• Join Snowflake’s Incident Response team and help scale security at a fast-growing software company • Deploy, guide, and refine autonomous AI agents for initial triage, context gathering, and rapid investigation • Handle escalations, lead security investigations, and act as Incident Commander for critical incidents • Build scripts, automation pipelines, and agentic workflows to improve incident response • Partner with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams • Create and improve detections, threat signatures, and guardrails for traditional and AI-driven attack vectors • Participate in a periodic on-call rotation, potentially involving non-traditional working hours • Translate incident findings and root-cause analysis into tactical fixes and long-term security engineering objectives

🎯 Requirements

• 2+ years of relevant experience in incident response or security operations preferred • Strong experience in incident response, security investigations, and running incidents as the Incident Commander • Advanced experience using security stack capabilities (EDR, SIEM, SOAR, DLP) across endpoints, identity providers, SaaS, and cloud workloads • Deep familiarity with AI/LLM tooling, security copilots, and AI-driven telemetry • Knowledge of securing frontier AI infrastructure, including model training and serving pipelines and AI agent permissions • Proven ability to detect and respond to modern AI-driven attacks • Proficiency in Python • Expert-level understanding of cloud security architectures (AWS, GCP, or Azure) and container runtime isolation (Docker, Kubernetes) • Ability to translate incident findings and root-cause analysis into tactical fixes and long-term security engineering objectives • Ability to perform static and dynamic malware analysis using sandbox environments and AI-assisted reverse engineering tools • Experience with threat hunting or detection-as-code programs is a bonus • Experience running sensitive investigations alongside Legal and HR is a bonus • Familiarity with large-scale data platforms and security telemetry analysis is a bonus • Contributions to open-source security tooling or detection rules are a bonus • Industry certifications such as GCIH, GCFA, or GREM are a bonus • Must be authorized to work in the country to which you are applying