Security Engineer, Detection and Response, 2+ Years of Experience

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together. The Company’s three core products are Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world; Lens Studio, an augmented reality platform that powers AR across Snapchat and other services; and its AR glasses, Spectacles.

Snap Engineering teams build fun and technically sophisticated products that reach hundreds of millions of Snapchatters around the world, every day. We’re deeply committed to the well-being of everyone in our global community, which is why our values are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront.

We’re looking for a Security Engineer to join our Detection and Response (D&R) team! As a member of the D&R Threat Detection team, you will build and understand threat models which pose an imminent threat to our platform and business, invest in research and development to collect new data sources, improve our threat intelligence, and drive efforts to achieve holistic threat detection. Working from one of our US West Coast offices (Santa Monica or Palo Alto), you’ll collaborate with engineers across many disciplines to operationalize the identification and eradication of threats across our enterprise environments.

What you’ll do:

• Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments

• Build tools and devise automation strategies to improve Snap Inc.’s ability to hunt threats and respond to intrusions 

• Investigate events generated by the alerting pipeline and triage potential incidents

• Work closely with multiple Snap Inc. teams during incidents and drive response efforts

• Identify, analyze, fingerprint and build threat intelligence on trends and developments in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Knowledge, Skills & Abilities:

• Proven experience in one or more of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence

• Strong development skills in Python and/or Go

• Advanced knowledge of operating system internals, and a core competency in two or more of the following: macOS, Windows, Linux, Kubernetes, Amazon Web Services, and Google Cloud Platform
   

Minimum Qualifications: 

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field

• 2+ years of experience in the field of security monitoring or related security role

Preferred Qualifications:

• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response

• Familiarity with cloud-based services and infrastructure (Google Cloud, Workspace, AWS, etc.)

• Excellent verbal and written communication skills, with high attention to detail

• Practical experience in a BeyondCorp model

• Work record of collaborating with internal and external stakeholders at all levels of a company

If you have a disability or special need that requires accommodation, please don’t be shy and provide us some information.

"Default Together" Policy at S