Senior Incident Response Engineer

Remote, Poland

Snowflake Inc.

View company page

We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.


Snowflake is growing fast and we’re scaling our team to help enable and accelerate our growth. We’re passionate about our people, our customers, our values and our culture! We’re also looking for people with a growth mindset and the pragmatic insight to solve for today while building for the future. And as a Snowflake employee, you will be accountable for supporting and enabling diversity and belonging.

Snowflake started with a clear vision: make modern data warehousing effective, affordable, and accessible to all data users. Because traditional on-premises and cloud solutions struggle with this, Snowflake developed an innovative product with a new built-for-the-cloud architecture that combines the power of data warehousing, the flexibility of big data platforms, and the elasticity of the cloud at a fraction of the cost of traditional solutions.


  • Join a high impact team of security experts to scale security at one of the fastest-growing software companies ever
  • Handle escalations, and lead security investigations and incidents as Incident Commander
  • Maintain playbooks and develop comprehensive and well-structured incident reports
  • Build scripts, tools, and methodologies to enhance Snowflake incident response
  • Partner closely with our Threat Detection, Automation, ProductSecurity, Legal, HR, Cloud and Data teams
  • Create and improve detections and threat signatures
  • Participate in on-call rotation periodically which may involve non-traditional working hours


  • Strong experience in IR, security investigations, and running incidents as the incident commander
  • Experience using investigative tools such as EDR, DLP, SIEM, and SOAR
  • Automation experience in Python and be comfortable with SQL 
  • Excellent understanding of cloud security
  • Ability to convert long term strategy into short and long-term objectives
  • Significant experience leading security projects 
  • Knowledge of network and web protocols, and an in-depth knowledge of Linux/Unix tools and architecture
  • Experience conducting forensics investigations on Unix or Windows hosts
  • Knowledge of dynamic and static malware analysis


Snowflake is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, color, gender identity or expression, marital status, national origin, disability, protected veteran status, race, religion, pregnancy, sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  

* Salary range is an estimate based on our salary survey 💰

Tags: Automation Big Data Cloud EDR Forensics Incident response Linux Malware Python SIEM SOAR SQL Strategy Threat detection UNIX Windows

Regions: Remote/Anywhere Europe
Country: Poland
Job stats:  32  8  0
  • Share this job via
  • or

More jobs like this

Explore more InfoSec/Cybersecurity career opportunities

Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cyber Security in general, filtered by job title or popular skill, toolset and products used.