Director of Engineering - Application, Cloud and Offensive Security

Responsibilities

• Define and execute the security strategy across three core pillars: application security, cloud security assurance, and offensive security (including the red team program), setting direction and driving measurable outcomes across all three pillars.
• Build and develop a high-performing security engineering organization, hiring top talent and creating a culture of rigor, ownership, and continuous improvement.
• Drive the offensive security program including red team operations, adversarial simulations, and proactive threat modeling to stay ahead of emerging attack vectors in an AI-accelerated threat landscape.
• Partner closely with engineering, product, and infrastructure leadership to embed security into Snowflake's AI products and cloud architecture from the ground up.
• Own the cloud security assurance function, ensuring Snowflake's cloud environment meets the security standards expected by enterprise customers and regulators worldwide.
• Translate security risk into business impact, communicating program status, emerging threats, and strategic priorities to executive stakeholders with clarity and confidence.
• Influence company-wide security posture through cross-functional collaboration with Legal, Compliance, Trust, and the broader CISO organization.

Requirements

• 12+ years of progressive experience in security engineering, with significant tenure in leadership roles overseeing multi-domain security programs (or equivalent experience).
• Deep expertise across at least two of the three pillars: application security, cloud security, or offensive security, with working knowledge across all three.
• Proven track record building and scaling high-performing security engineering teams in a fast-paced enterprise technology environment.
• Strong command of cloud security architecture across AWS, Azure, or GCP, including cloud-native security controls, identity, and infrastructure security.
• Experience leading or overseeing a red team or offensive security program, with a clear understanding of adversarial tactics, techniques, and procedures (TTPs).
• Exceptional ability to partner with product and engineering organizations, influencing secure-by-design practices and embedding security without creating velocity drag.
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

Nice-to-Haves

• Experience securing AI/ML workloads, large language model infrastructure, or AI-adjacent attack surfaces.
• Familiarity with security for multi-tenant cloud data platforms at enterprise scale.
• Industry certifications such as CISSP, OSCP, GREM, or equivalent.
• Contributions to industry security research, conference presentations, or open-source security tooling.