Cloud Security Engineer

There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow.

As a member of the Cloud Security team, you’ll be integral to maintaining and raising the security bar across our production cloud environments. We are looking for motivated, passionate individuals in cloud security architecture and operations who can help us maintain a highly defensible cloud infrastructure and embody the “builder” mindset to reduce toil for our team and our internal customers.

Our ideal candidate wakes up each morning thinking about ways to enhance security. Their goal is to lower risk while letting the business move quickly and safely. They believe security should be an inherent property of the tools and processes engineers use every day. They want to Automate Everything, and they relish an opportunity to apply tooling, automation, and self-service to security workflows to increase team scale and reliability.

RESPONSIBILITIES

• Assist in building monitoring and alerting systems to ensure systems are hardened, vulnerabilities are patched, and threats are detected.
• Operate vulnerability discovery tools for operating systems, containers, and software libraries.
• Support in building, deploying, and managing production security tools and services to monitor networks, endpoints, and cloud workloads.
• Help design and operate scalable processes to provision cloud access and maintain least-privilege.
• Leverage your growing expertise in systems, network, and cloud security to troubleshoot production services.
• Contribute to maintaining a reliable and low-touch infrastructure using technologies such as Terraform, Kubernetes, and immutable images.

MINIMUM QUALIFICATIONS

• 2+ years experience deploying services on public cloud infrastructure.
• Basic understanding of cloud and network security.
• Fluency in one or more programming or scripting languages.
• Experience with security tools to address threats and lower risk: CSPM, vulnerability scanners, static analyzers, web application firewalls, IDS/IPS, endpoint security monitoring, etc.
• Knowledge of networking and web protocols (TCP/IP, HTTP, TLS, REST), and the ability to analyze traffic to find anomalies.
• Understanding of modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
• Demonstrated ability to collaborate with other teams to achieve complex objectives.

PREFERRED QUALIFICATIONS

• 4+ years experience working in an information security discipline.
• Experience deploying services in a multi-cloud environment, with particular value on Azure and GCP expertise.
• Ability to write SQL queries and build dashboards, metrics, and reports to drive security outcomes.
• Experience using CI/CD pipelines to perform automated security testing and change management.
• Familiarity with concepts from “Site Reliability Engineering” and “Building Secure & Reliable Systems.”
• Contributions to the security community, such as open source tools, research papers, conference talks, etc.

Every Snowflake employee is expected to follow the company’s confidentiality and security standards for handling sensitive data. Snowflake employees must abide by the company’s data security plan as an essential part of their duties. It is every employee's duty to keep customer information secure and confidential.