Principal/Senior Security Engineer, Anti-Abuse Response, Product Security

The Product Security organization ensures that Snowflake products are built and shipped with the highest security. The Abuse detection and response team in the Product Security org will protect the Snowflake platform and customers from abuse. 

In this role, you will work with cross-functional partners to define the multi-year security strategy for abuse detection and response. You will help define the process and conduct security and anti-abuse reviews of Snowflake apps. You will investigate security tools and define new processes to help ensure the safety of our customers on our platform. This is a unique opportunity to bootstrap and build a new initiative that is core to the success of Snowflake’s business as a whole.

RESPONSIBILITIES:

• Respond to abuse incidents on the Snowflake platform.
• Define and help build processing pipelines and heuristics for abuse detection and response across the Snowflake platform.
• Help evaluate the capabilities of existing security tools to detect abuse (e.g., cryptomining on the platform) and make recommendations to buy or build solutions in-house.
• Develop and share knowledge of abuse analysis / investigation tools and techniques.
• Work with stakeholders to develop, integrate and deploy abuse detection, prevention, and response capabilities.
• Consult with development teams to provide guidance on new features and anti-abuse recommendations.
• Operationalize and continuously improve existing abuse capabilities.

MINIMUM QUALIFICATIONS:

• Bachelor's degree in Computer Science or a related discipline, and at least five years of industry experience in an abuse / threat detection and response capacity.
• Programming experience in SQL, and Python, Javascript, Java, or Go.
• Experience in application-level vulnerability testing and code-level security auditing.
• Knowledge of security engineering, computer and network security, security protocols, and applied cryptography.
• Experience designing, testing, and maintaining bot-detection, anti-abuse solutions and/or abuse detection and response playbooks.

PREFERRED QUALIFICATIONS:

• Experience with the Snowflake Data Cloud.
• Experience building large-scale pipelines and infrastructure for performing static analysis, dynamic analysis, and malware or threat detection.
• Experience designing, testing, and maintaining security solutions and / or anti-abuse scanning pipelines.
• Prior contributions to the cybersecurity community (e.g., security research, presentations, blogs, etc.).
• Ability to write SQL queries and build dashboards, metrics, and reports to drive security outcomes.

Every Snowflake employee is expected to follow the company’s confidentiality and security standards for handling sensitive data. Snowflake employees must abide by the company’s data security plan as an essential part of their duties. It is every employee's duty to keep customer information secure and confidential.