Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 14 hours agoWe saw it 5 min after it went up

Incident Response Engineer

Snowflake359 open roles

Pay
$143,000 – $205,800 a year
Where
US-CA-Bay Area-Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIncident Response EngineerSnowflake · US-CA-Bay Area-Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Snowflake's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.5% of postings close within 7 days. Measured by our own scanner across the market. Snowflake postings stay open a median of 42 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.3%3 days
  3. 10.5%7 days
  4. 15.9%14 days
  5. 34.1%30 days
This job: posted 14 hours ago

Snowflake median: 42 days open

The posting

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

We are hiring a Security Incident Response Engineer to join our Incident Response team. You will help redefine how incidents are handled at scale, pairing autonomous AI agents with human judgment so that we can detect, investigate, and contain threats faster across a rapidly growing cloud and AI footprint.

AS A SECURITY INCIDENT RESPONSE ENGINEER AT SNOWFLAKE, YOU WILL:

- Join a high-impact team of security experts to scale security at one of the fastest-growing software companies ever

- Spearhead an agentic approach to Incident Response by deploying, guiding, and refining autonomous AI agents that execute initial triage, context gathering, and rapid investigation alongside human Incident Commanders

- Handle escalations, lead security investigations, and act as Incident Commander for critical incidents

- Build scripts, automation pipelines, and agentic workflows that continuously enhance Snowflake's incident response capabilities

- Partner closely with our Threat Detection, Automation, Product Security, Legal, HR, Cloud, and Data teams

- Create and improve detections, threat signatures, and guardrails for both traditional and AI-driven attack vectors

- Participate in a periodic on-call rotation, which may involve non-traditional working hours

OUR IDEAL SECURITY INCIDENT RESPONSE ENGINEER WILL HAVE:

- 2+ years of relevant experience in incident response or security operations preferred

- Strong experience in incident response, security investigations, and running incidents as the Incident Commander

- Advanced experience using security stack capabilities (EDR, SIEM, SOAR, DLP) across endpoints, identity providers, SaaS, and cloud workloads

- Deep familiarity with AI/LLM tooling, security copilots, and AI-driven telemetry to accelerate investigations, threat triage, and post-incident reporting

- Knowledge of securing frontier AI infrastructure, including model training and serving pipelines and AI agent permissions

- Proven ability to detect and respond to modern AI-driven attacks

- Proficiency in Python to build automated orchestration pipelines, reduce manual incident response toil, and programmatically enrich security alerts

- Expert-level understanding of cloud security architectures (AWS, GCP, or Azure) and container runtime isolation (Docker, Kubernetes)

- Ability to translate incident findings and root-cause analysis into short-term tactical fixes and long-term security engineering objectives

- Ability to perform static and dynamic malware analysis using sandbox environments and modern AI-assisted reverse engineering tools

BONUS POINTS FOR THE FOLLOWING:

- Experience with threat hunting or building detection-as-code programs

- Experience running sensitive investigations alongside Legal and HR, such as insider risk cases

- Familiarity with large-scale data platforms and using them to analyze security telemetry

- Contributions to open-source security tooling, detection rules, or the broader security community

- Industry certifications such as GCIH, GCFA, or GREM

WHY JOIN OUR INCIDENT RESPONSE TEAM AT SNOWFLAKE?

This is an opportunity to shape what incident response looks like in the agentic era. You will work on the front line of defending one of the world's most important data platforms, building the AI-driven workflows that let a team of experts respond with the speed and precision that modern threats demand.

You will work across Detection, Product Security, Cloud, Legal, and HR, see incidents end to end, and turn what you learn into lasting improvements to how Snowflake protects its customers and its people.

Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com http://careers.snowflake.com

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Snowflake's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Snowflake's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Snowflake's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.