Security Engineer, Detection & Response, Level 4

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together. The Company’s three core products are Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world; Lens Studio, an augmented reality platform that powers AR across Snapchat and other services; and its AR glasses, Spectacles.

Snap Engineering teams build fun and technically sophisticated products that reach hundreds of millions of Snapchatters around the world, every day. We’re deeply committed to the well-being of everyone in our global community, which is why our values are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront.

We’re looking for a Security Engineer to join our Detection and Response (D&R) team! 

What you’ll do:

• Build and understand threat models which pose an imminent threat to our platform and business

• Invest in research and development to collect new data sources, improve our threat intelligence, and drive efforts to achieve holistic threat detection

• Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments

• Build tools and devise automation strategies to improve Snap Inc.’s ability to hunt threats and respond to intrusions 

• Investigate events generated by the alerting pipeline and triage potential incidents

• Work closely with multiple Snap Inc. teams during incidents and drive response efforts

• Identify, analyze, fingerprint and build threat intelligence on trends and developments in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime

Knowledge, Skills & Abilities:

• Proven experience in one or more of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence

• Strong development skills in Python and/or Go

• Advanced knowledge of operating system internals, and a core competency in two or more of the following: macOS, Windows, Linux, Kubernetes, Amazon Web Services, and Google Cloud Platform
   

Minimum Qualifications: 

• Bachelor's Degree in a relevant technical field such as computer science or equivalent years of practical work experience

• 2+ years post-Bachelor's security related experience; or Master's degree in a technical field + 1+ year of post-grad security experience; or PhD in relevant technical field

• Experience in the field of security monitoring or related security role

Preferred Qualifications:

• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response

• Familiarity with cloud-based services and infrastructure (Google Cloud, Workspace, AWS, etc.)

• Excellent verbal and written communication skills, with high attention to detail

• Work record of collaborating with internal and external stakeholders at all levels of a company

If you have a disability or special need that requires accommodation, please don’t be shy and provide us some information.

"Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To