Security Engineer

Description:

We’re looking for a Security Engineer to join our Detection and Response (D&R) team! As a member of the D&R Threat Detection team, you will build and understand threat models which pose an imminent threat to our platform and business, invest in research and development to collect new data sources, improve our threat intelligence, and drive efforts to achieve holistic threat detection. Working from our West Coast (US), Switzerland, or Australia offices, you’ll collaborate with engineers across many disciplines to operationalize the identification and eradication of threats across our production environments, corporate infrastructure, and internal tooling.

What you’ll do:

• Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments
• Build tools and devise automation strategies to improve Snap Inc.’s ability to hunt threats and respond to intrusions
• Investigate events generated by the alerting pipeline and triage potential incidents
• Work closely with multiple Snap Inc. teams during incidents and drive response efforts
• Identify, analyze, fingerprint and build threat intelligence on trends and developments in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Knowledge, Skills & Abilities:

• Proven experience in one or more of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence
• Strong development skills in Python and/or Go
• Advanced knowledge of operating system internals, and a core competency in two or more of the following: macOS, Windows, Linux, Kubernetes, Amazon Web Services, and Google Cloud Platform