Security Engineer, Level 5, Detection & Response

About the role

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together.

The Company operates Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc., a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji, Saturn, and other digital services.

Snap Security teams protect the trust and safety of our global community by securing the systems and data that power Snapchat. We safeguard hundreds of millions of Snapchatters every day, ensuring that every product and service is built on a foundation of security and resilience. Our values guide everything we do - from how we anticipate and mitigate threats to how we collaborate across Snap. We move fast, with precision, and always execute with privacy at the forefront.

We’re looking for a Senior Security Engineer to join our Detection and Response (D&R) team!

What you’ll do:

- Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments

- Build tools and devise automation strategies to improve Snap Inc.’s ability to hunt threats and respond to intrusions

- Investigate events generated by the alerting pipeline and triage potential incidents

- Utilize AI tools and high velocity engineering workflows to design and ship scalable services while upholding rigorous standards for code correctness, security, and production ready quality code.

- Work closely with multiple Snap Inc. teams during incidents and drive response efforts

- Identify, analyze, fingerprint and build threat intelligence on trends and developments in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Knowledge, Skills & Abilities:

- Proven experience in one or more of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence

- Proficiency in, or a strong aptitude for, leveraging AI tools to streamline development, paired with the critical judgment to audit generated output for architectural integrity, performance bottlenecks, and security risks.

- Adaptability in learning and applying evolving AI systems and tools to remain at the forefront of engineering trends and modern development practices.

- Strong development skills in Python and/or Go

- Advanced knowledge of operating system internals, and a core competency in two or more of the following: macOS, Windows, Linux, Kubernetes, Amazon Web Services, and Google Cloud Platform

Minimum Qualifications: