Security Engineer (Detection & Response)

Join Snap Inc., the company behind Snapchat, as a Senior Security Engineer on the Detection and Response (D&R) team. In this role, you will design and implement logging and alerting systems, build tools for threat hunting and incident response, investigate potential incidents, and analyze adversary tactics. You will work closely with multiple teams during incidents and drive response efforts. The position offers a comprehensive benefits package, including generous time off, medical coverage, and a 401(k) plan.

• Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments.
• Build tools and devise automation strategies to improve Snap Inc.’s ability to hunt threats and respond to intrusions.
• Investigate events generated by the alerting pipeline and triage potential incidents, working closely with multiple Snap Inc. teams during incidents.

• Strong development skills in Python and/or Go
• Proficiency in, or a strong aptitude for, leveraging AI tools to streamline development, paired with the critical judgment to audit generated output for architectural integrity, performance bottlenecks, and security risks
• Advanced knowledge of operating system internals, and a core competency in two or more of the following: macOS, Windows, Linux, Kubernetes, Amazon Web Services, and Google Cloud Platform
• Adaptability in learning and applying evolving AI systems and tools to remain at the forefront of engineering trends and modern development practices
• Proven experience in one or more of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence
• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
• 6+ years of post-Bachelor’s security related experience; or Master’s degree in a technical field + 5+ year of post-grad security related experience; or PhD in a relevant technical field + 2+ years of post-grad security related experience
• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response
• Familiarity with cloud-based services and infrastructure (Google Cloud, Workspace, AWS, etc.)
• Excellent verbal and written communication skills, with high attention to detail
• Work record of collaborating with internal and external stakeholders at all levels of a company
• Practical experience in a BeyondCorp model