Staff Security Engineer – Threat Detection
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Responsibilities:
- Develop and deploy rules-based and AI-assisted threat detections using testing, validation, CI/CD pipelines, detections-as-code, and a full detection development lifecycle
- Analyze threat-detection coverage gaps and mitigate risks through detective controls
- Experiment with AI/ML approaches to improve signal-to-noise ratio and analyst efficiency
- Make data-driven recommendations for detective and preventative controls based on threat models, proactive threat hunts, and exploration of logs and telemetry
- Design and build automations and AI-driven workflows to strengthen security posture and reduce mean time to detect and respond
- Build stakeholder partnerships to deliver detection as a service, including self-service patterns, reusable components, and AI-enhanced detections
- Measure and improve detection quality across coverage, precision and recall, false positive rate, and latency
Requirements:
- 8+ years of security engineering experience across threat detection, incident response, threat hunting, product security, or corporate security, or equivalent experience
- Strong coding ability in Python or Go, with experience building software, data tooling, or automations
- Experience applying coding skills to AI/ML-powered detection and response
- Programmatic data handling using SQL and Python, ideally with large-scale log and telemetry datasets
- Production coding experience, including unit tests, version control, and CI/CD integration
- Experience developing and operating agent-based or agentic workflows, such as LangGraph or similar orchestration frameworks
- Hands-on experience with AWS, Azure, or GCP and understanding of native logging, monitoring, and security services
- Familiarity with SaaS and workstation risks including account compromise, data exfiltration, phishing, and supply chain attacks
- Risk-based approach to prioritizing security initiatives and evaluating AI versus traditional rules and heuristics
- Computer Science degree or equivalent practical experience is listed as a bonus
- Bonus experience with GenAI and LLM-based security workflows
- Bonus experience with Terraform, CloudFormation, or detections-as-code frameworks
- Bonus experience building production platforms processing high-volume logs, metrics, or traces
- Bonus experience deploying detections at global scale
- Bonus experience with Snowflake or equivalent cloud data platforms and security analytics pipelines
Similar Jobs
Staff Security Engineer
Staff Security Engineer securing cloud applications and AI/LLM systems at Robots & Pencils. Defining architecture, threat defenses, automation, and production security standards.
Senior Security Engineer
Senior Security Engineer leading architecture, authorization, and remediation for Latitude’s federal health supply-chain software. Fully remote within the United States.
Security Engineer
Security Engineer securing supply-chain and logistics software for a federal health customer. Designing controls, integrating pipeline security, and validating safe releases.
Administrative Support Assistant – Security Systems Industry
Remote administrative assistant supporting a security systems company with phone calls, inspection reports, scheduling, CRM setup, and social media support. Structured role working under office-manager direction.
Security Engineer
Security Engineer strengthening 11:11 Systems’ global SOC through SIEM, SOAR, and incident-response engineering. Supporting customer security operations, detection improvements, and escalations.
Security Engineer
Security Engineer strengthening 11:11 Systems' global SOC through SIEM, SOAR, and incident response. Supporting customer escalations, detection engineering, automation, and 24/7 security operations.
Security Engineer
Security Engineer operating 11:11 Systems’ global SOC. Building SIEM/SOAR detections, supporting incident response, and improving customer security operations.
Senior Specialist, Microsoft Cloud & Security
Especialista sênior projetando e sustentando ambientes Microsoft 365, Azure e identidade híbrida. Protegendo dados, resolvendo incidentes críticos e conduzindo projetos corporativos.
Information Security Access Specialist
Information Security Access Specialist securing employee access for GR8_TECH’s B2B iGaming platforms. Automating IAM workflows, RBAC governance, and AI-assisted access operations.
Application Security Consultant
Application Security Consultant assessing customer applications for vulnerabilities at DirectDefense, a cybersecurity services provider. Conducting dynamic testing, static code reviews, and remediation guidance.
Information Security Consultant
Information Security Consultant delivering GRC assessments, frameworks, and compliance advisory for Cognisys clients. Translating security requirements into practical improvements across diverse industries.
DevSecOps Engineer, Security Compliance
DevSecOps Engineer securing SAP delivery for federal clients. Automating deployments, vulnerability checks, controls, and authorization evidence.
Regional Security Manager
Regional Security Manager protecting Saab’s defence and security operations across Southern Africa. Coordinating personnel, risk, compliance, crisis response and regional security strategy.
Principal Security Architect
Principal Security Architect owning cloud and application security for Lilly’s AWS-heavy strategic programs. Protecting trade secrets through architecture reviews, threat modeling, and risk governance.
Senior Security Architect
Senior Security Architect designing scalable cybersecurity solutions for Humana’s healthcare insurance and CenterWell services. Supporting cloud, application, risk, compliance, automation, and acquisition integration initiatives.
Managing Engineer – Data Security Engineering
Managing Engineer leading Allstate’s data security engineering team. Building automated DLP, data intelligence, and data access controls for insurance operations.
SAP Security Consultant – AMS
SAP Security Consultant administering roles, authorizations, and access governance for DyFlex clients. Supporting audits, SoD analysis, GRC, upgrades, and managed SAP environments.
Senior Security Engineer, Customer Transparency
Senior Security Engineer improving customer transparency for Tanium’s AI-powered endpoint management and security platform. Managing vulnerability disclosure, SBOM visibility, bug bounty operations, and security advisories.
Técnico/a de Seguridad, PAM – CyberArk
Técnico/a PAM CyberArk administrando cuentas privilegiadas, credenciales y Safes. Soporte de servicios gestionados de ciberseguridad para un cliente financiero de Logicalis Spain.
Domain Lead – Transformation, Cybersecurity Strategy Adoption
Cybersecurity transformation lead embedding policies, change management, and security adoption across SNCB/NMBS. Driving workforce engagement and governance for Belgium’s national railway.