Job description

Threat Detection Program Specialist Where data does more. Join the Snowflake team. Snowflake has developed a world class cloud data platform that is effective, affordable, and accessible to all data users. You will be responsible for helping to enhance Snowflake's Threat Detection Program and extending the reach and impact of threat detection here at Snowflake. The ideal candidate will seek to gain a strong understanding of the Snowflake product and corporate environment to create and optimize detections that mitigate risks identified. You will partner with stakeholders across security making informed, knowledgeable, and data driven decisions based on threat models or proactive threat hunts. You will make recommendations for detective and preventative controls, and build automations to enhance our security posture. What you need: Experience in writing detections, threat hunting, or responding to incidents across various platforms Solid experience writing code-whether that's in software engineering, data engineering, or building automations Experience collaborating with various security teams and stakeholders to build and maintain detections Ability to review and analyze logging and observability requirements to support detection and response capabilities A risk based approach to security in order to assist with prioritizing key security initiatives Knowledge of the current security landscape with domain knowledge in a number of areas Automation first approach to scale security Be a humble, team player prioritizing team success in a zero-ego environment What you will do: Develop and deploy detections using engineering practices (testing/validation, CI/CD pipelines, detections as code, detection development lifecycle, etc.) Mature our threat detection program by analyzing gaps and mitigating risks via detective controls Build and maintain strong partnerships with our stakeholders to provide detection as a service Improve our team by building the next generation of detection engineering capabilities (graph-based monitoring, in-house SIEM development, etc.) Minimum qualifications: Experience with development in a high level programming language (Go, Python, etc.) Experience with handling data programmatically (SQL, Python, etc.) Experience writing detections as code for organization specific risks Experience with one of the major cloud providers (AWS, Azure, GCP) Familiarity with the risks that impact SaaS products and workstations Preferred qualifications: Computer Science Degree You've published or presented at conferences showcasing your thought leadership in the security space Developed and worked with systems that utilize infrastructure-as-a-code Experience building and maintaining production level software Experience deploying detections at a global scale accounting for different geographical requirements Experience with Snowflake or data lake equivalent Why you should work with us: We are laser focused on doing security better, and we do not tolerate the status quo We have strong demand from our customers, and support from the business for security We are a great team that has a diverse set of backgrounds and skills You want to be a part of a team solving Security Threat Detection at a global scale Did we mention we are one of the fastest-growing software companies, ever? The opportunity for impact is enormous

Requirements