Security Engineer (Detection & Response)

Join Snap Inc. as a Senior Security Engineer in the Detection and Response (D&R) team. You will design and implement logging and alerting systems, build tools for threat hunting, investigate potential incidents, and work closely with multiple teams during incidents. You will also analyze and build threat intelligence on adversary tactics. The position offers a comprehensive benefits package, including parental leave, medical coverage, and retirement plans.

• Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments.
• Build tools and devise automation strategies to improve Snap Inc.’s ability to hunt threats and respond to intrusions.
• Investigate events generated by the alerting pipeline and triage potential incidents, utilizing AI tools and high velocity engineering workflows.
• Adaptability in learning and applying evolving AI systems and tools to remain at the forefront of engineering trends and modern development practices
• Proven experience in one or more of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence
• Advanced knowledge of operating system internals, and a core competency in two or more of the following: macOS, Windows, Linux, Kubernetes, Amazon Web Services, and Google Cloud Platform
• Strong development skills in Python and/or Go
• Proficiency in, or a strong aptitude for, leveraging AI tools to streamline development, paired with the critical judgment to audit generated output for architectural integrity, performance bottlenecks, and security risks
• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
• 6+ years of post-Bachelor’s security related experience; or Master’s degree in a technical field + 5+ year of post-grad security related experience; or PhD in a relevant technical field + 2+ years of post-grad security related experience
• Practical experience in a BeyondCorp model
• Work record of collaborating with internal and external stakeholders at all levels of a company
• Familiarity with cloud-based services and infrastructure (Google Cloud, Workspace, AWS, etc.)
• Excellent verbal and written communication skills, with high attention to detail
• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response