Senior Security Engineer, Product Security Incident Response at Snowflake

Department: Engineering

Compensation

$176,000 – $253,000/yr

Setup: Hybrid
Location: Menlo Park, California
Level: senior
Posted: Aug 11, 2026

Description

Snowflake is hiring a Senior Security Engineer focused on Product Security Incident Response, with a primary focus on AI and LLM security. The role leads incident response for product-level security events, integrates response capabilities into AI product pipelines, develops detection and remediation playbooks, secures AI-native codebases and infrastructure, and builds automation to accelerate detection and response. The position requires at least five years of information security experience, incident-commanding experience, AI/ML security expertise, cloud and SQL proficiency, and a bachelor's degree or equivalent experience.

Required Skills

Incident response
AI/ML security
Threat modeling
SQL
Python
Cloud-native environments
Secure architecture

Additional Information

Minimum Education: Bachelor's degree in Computer Science or a related field, or equivalent experience
Required Previous Experiences: At least 5 years of information security experience, primarily in incident response, security engineering, or product/application security
Direct experience serving as incident commander for product-focused security incidents
Experience leading or building an application or security engineering program with a focus on securing AI/ML systems
Experience with threat modeling and security testing across AI attack surfaces, including prompt injection, model inversion, embedding extraction, and supply chain attacks
Working knowledge of cloud-native environments and the threat landscape for SaaS and AI platforms
SQL proficiency and experience building automation and tools with common programming languages
Preferred Qualifications: Experience securing AI/ML infrastructure, including model serving, vector databases, embedding pipelines, API gateways, and LLM-integrated application architectures
Experience building agentic incident response capabilities, including skills, agents, and pipelines
Understanding of current attacker TTPs, including adversarial ML, agent manipulation, and LLM jailbreaking in enterprise contexts
Familiarity with CI/CD and secure release lifecycle patterns, with an emphasis on building security into AI feature pipelines
Preferred certifications including GCIA, GCIH, GCSA, GDAT, CISSP/GISP, or cloud certifications