Security Engineer - Threat Detection

Responsibilities

• Develop and deploy rules-based and AI-assisted threat detections using testing, validation, CI/CD pipelines, detections-as-code, and a full detection development lifecycle.
• Analyze threat detection coverage gaps and mitigate risks through detective controls, including AI/ML approaches that improve signal-to-noise ratio or analyst efficiency.
• Make data-driven recommendations for detective and preventative controls using threat models, proactive threat hunts, and exploration of logs and telemetry.
• Design and build automations and AI-driven workflows to strengthen security posture and reduce mean time to detect and respond.
• Partner with Security and Engineering stakeholders to deliver detection as a service, including self-service patterns, reusable components, and AI-enhanced detections.
• Measure and improve detection quality across coverage, precision and recall, false positive rate, and latency.

Requirements

• 8+ years of security engineering experience in one or more of threat detection, incident response, threat hunting, product security, or corporate security, or equivalent experience.
• Strong coding ability in a high-level language such as Python or Go, with experience building software, data tooling, or automations.
• Experience handling data programmatically with SQL and Python, ideally using large-scale log and telemetry datasets.
• Experience writing production code with unit tests, version control, and CI/CD integration.
• Experience developing and operating agent-based or agentic workflows, such as LangGraph or similar orchestration frameworks.
• Hands-on experience with AWS, Azure, or Google Cloud and its native logging, monitoring, and security services.
• Familiarity with SaaS and workstation risks, including account compromise, data exfiltration, phishing, and supply chain attacks.
• A risk-based, team-oriented approach to prioritizing security initiatives and evaluating AI applications.

Nice-to-haves

• Computer Science degree or equivalent practical experience.
• Experience applying GenAI and LLM-based approaches to security workflows, including detection engineering, alert triage, enrichment, or summarization.
• Experience with infrastructure as code, such as Terraform or CloudFormation, and/or detections-as-code frameworks.
• Experience building and maintaining production software or platforms processing high-volume logs, metrics, and traces or powering security analytics.
• Experience deploying detections at global scale.
• Experience with Snowflake or equivalent cloud data platforms, including security data pipelines or analytics, and interest in Snowflake Cortex AI or similar in-platform AI capabilities.

Compensation and Benefits

• Salary range: $211,000-$303,600 annually.
• Salary and benefits information is available on the Snowflake Careers Site for jobs located in the United States.