Incident Response Engineer

Snowflake

. Join a high-impact security team scaling security at Snowflake .

Posted 10/16/2026full-timeRemote • California • United StatesJuniorMid-Level💰 $143,000 - $205,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response and security operations, with a strong focus on deploying AI-driven solutions and improving security architectures. Proficient in translating incident findings into actionable security enhancements and collaborating across teams to strengthen overall security posture.

Highest-signal resume keywords

Incident ResponseSecurity InvestigationsEDR, SIEM, SOAR, DLPPython ProgrammingCloud Security Architectures

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseSecurity InvestigationsPython ProgrammingMalware AnalysisThreat HuntingAI-Driven TelemetryContainer Runtime IsolationStatic and Dynamic AnalysisRoot-Cause AnalysisAutomation Pipelines

Soft Skills

LeadershipCollaborationCommunicationProblem-SolvingIncident Command

Tools & Technologies

EDRSIEMSOARDLPDockerKubernetesAI CopilotsSecurity TelemetryCloud WorkloadsLarge-Scale Data Platforms

Certifications & Qualifications

GCIHGCFAGREM

Industry Keywords

Security OperationsIncident CommandAI-Driven AttacksThreat DetectionSecurity Engineering

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformKubernetesPython

About the role

Key responsibilities & impact

Join a high-impact security team scaling security at Snowflake
Deploy, guide, and refine autonomous AI agents for initial triage, context gathering, and rapid investigation
Handle escalations and lead security investigations
Act as Incident Commander for critical incidents
Build scripts, automation pipelines, and agentic workflows to improve incident response
Partner with Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams
Create and improve detections, threat signatures, and guardrails for traditional and AI-driven attack vectors
Participate in a periodic on-call rotation
Translate incident findings and root-cause analysis into tactical fixes and long-term security engineering objectives
Turn incident learnings into lasting improvements to Snowflake’s security

Requirements

What you’ll need

2+ years of relevant experience in incident response or security operations preferred
Strong experience in incident response, security investigations, and running incidents as the Incident Commander
Advanced experience using EDR, SIEM, SOAR, and DLP across endpoints, identity providers, SaaS, and cloud workloads
Deep familiarity with AI/LLM tooling, security copilots, and AI-driven telemetry
Knowledge of securing frontier AI infrastructure, including model training and serving pipelines and AI agent permissions
Proven ability to detect and respond to modern AI-driven attacks
Proficiency in Python
Expert-level understanding of cloud security architectures (AWS, GCP, or Azure)
Experience with container runtime isolation (Docker, Kubernetes)
Ability to translate incident findings and root-cause analysis into tactical fixes and long-term security engineering objectives
Ability to perform static and dynamic malware analysis using sandbox environments and AI-assisted reverse engineering tools
Experience with threat hunting or detection-as-code programs
Experience running sensitive investigations alongside Legal and HR
Familiarity with large-scale data platforms and security telemetry analysis
Contributions to open-source security tooling, detection rules, or the security community
Industry certifications such as GCIH, GCFA, or GREM are a bonus
Ability to participate in a periodic on-call rotation, including non-traditional working hours

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
401(k) retirement plan
Flexible spending account
Health savings account
At least 12 paid holidays
Paid time off
Parental leave
Employee assistance program
Bonus plan eligibility
Equity plan eligibility