Senior Security Engineer

Snowflake Corporate Security team is laser focused on making security better for all Corporate/IT products and services. As a member of this team you will be involved in driving the security strategies across the corporate environment that balances Snowflake’s business growth while effectively managing security risks. The Corporate Security Architecture is looking for passionate Security Engineers and/or Security Architects to join this team and raise the security bar for Snowflake.

WHAT YOU WILL DO

• Be the technical leader in cloud security within the Corporate Security team for the Corporate/Enterprise teams at Snowflake.
• Work alongside the engineering teams, providing expert leadership and advice on secure cloud architecture, design, and implementation for workloads in AWS, Azure and GCP. Expertise in at least one of the 3 cloud service providers is required.
• Level up your skills securing modern languages and technologies running in a true multi-cloud/SaaS environment like AWS, GCP, Azure, Salesforce and many more.
• Use data and the power of Snowflake to drive major security initiatives in the cloud space.
• Lead the cloud security architecture, complete threat modeling, complete security testing and drive the DevSecOps model for partner teams.
• Design, develop, and manage robust Role-Based Access Control systems for our data lakes, ensuring seamless and secure access management.
• Identity Governance: Oversee and enhance identity governance frameworks, ensuring compliance with security policies and regulations.
• Data Security Management: Develop and enforce data security protocols to protect sensitive data within our data lakes.
• Policy Development: Create, implement, and maintain security policies and procedures related to data access and identity management.
• Access Control Audits: Conduct regular audits of access controls and identity governance processes to ensure compliance and identify areas for improvement.
• Automation and Optimization: Leverage automation tools to streamline access control processes and improve efficiency.
• User Support and Training: Provide support and training to users and administrators on access control policies and procedures.

WHAT YOU WILL NEED

• You have multi year (>5 years)  experience with AppSec, threat modeling, secure architecture and security testing in the Cloud (AWS, GCP and Azure) and SaaS space.
• You have real world experience in some of basic security concepts like Identity, Data protection, Monitoring and IR in the cloud services space.
• Strong analytical and problem-solving skills to identify and address security risks and vulnerabilities.
• You have multi year experience in AppSec and/or DevSecOps processes.
• You have a proven ability to manage yourself and produce results
• You have consistently delivered impactful security initiatives (cross-geo) independently
• You are hands-on and comfortable with languages like Java, JavaScript, Go, and Python
• You have familiarity with security testing tools techniques and technologies related to access control and identity management (e.g., ServiceNow, Streamlit, Veza).
• High attention to detail to ensure accurate implementation and management of access controls.
• Experience with automation tools and techniques to optimize access control processes.
• You are a strong communicator who is comfortable working cross-functionally, with a track record of delivering results and demonstrating strong ownership.

Why you should work with us

• We are laser focused on doing security better, and we do not tolerate the status quo.
• We have strong demand from our customers, and support from the business for security.
• We are a great team that combines a diverse set of backgrounds and skills.
• Did we mention we are one of the fastest-growing software companies, ever? The opportunity for impact is enormous.