Scale Engineer

Software Engineer - Trust & Platform Security

Security Engineer · Mid · Full Time

US-WA-BellevueUSD 160k – 230k1d ago
Apply for this role

Opens Snowflake's application page

Role

What you'll do.

This Software Engineer role on Snowflake's Trust & Platform Security team focuses on building next-generation cyber security monitoring, threat detection, and data protection systems operating at machine speed and scale. The ideal candidate has 2+ years of professional software engineering experience with strong foundations in network security, distributed systems, and cloud platform security fundamentals, positioned to ship production features that protect customer data across Snowflake's cloud infrastructure.

Responsibilities

  • Threat Detection System Development: Design, build, and ship production-grade components for detecting security vulnerabilities, threats, and agentic AI risks. Implement detection mechanisms that operate at enterprise scale, ensuring system reliability and performance while maintaining low false positive rates to minimize alert fatigue and security operations center overhead.
  • Data Protection Mechanism Engineering: Develop sophisticated data loss prevention and ransomware detection mechanisms that identify suspicious data movement patterns, exfiltration attempts, and anomalous activities. Tune detection signals and thresholds to achieve high accuracy while maintaining operational effectiveness in production environments.
  • Security Architecture and Design: Author and contribute to comprehensive design documents for platform features with explicit attention to reliability characteristics, latency requirements, auditability standards, and operational resilience. Collaborate with senior engineers and Product Management to establish technical requirements and system constraints.
  • Feature Ownership and Delivery: Own security features through complete lifecycle management including implementation, comprehensive testing, staging validation, and controlled production rollout. Work independently on well-scoped deliverables with guidance from senior teammates, taking responsibility for monitoring, observability, and post-deployment performance.
  • Cross-Functional Collaboration: Collaborate with senior engineers, security architects, and Product Management teams to translate security requirements into technical implementations. Participate in code reviews, security assessments, and knowledge-sharing sessions to elevate team technical standards and security posture.
  • Code Quality and Security: Write well-tested, secure, and maintainable code adhering to security best practices and defensive programming principles. Implement comprehensive unit tests, integration tests, and security-focused test cases. Actively participate in peer code reviews to ensure code quality, identify potential vulnerabilities, and maintain system security.

Qualifications

What we look for.

Technical

  • Core Programming Languages

    Solid proficiency in SQL, Java, and Python with ability to write production-grade code across multiple languages. Demonstrated ability to choose appropriate language paradigms for security-sensitive backend systems and data processing workloads.

  • Distributed Systems Architecture

    Working knowledge of building scalable distributed and backend systems including understanding of consistency models, distributed tracing, monitoring, and operational considerations at scale. Experience designing systems that handle high throughput and low-latency requirements.

  • Network Security Fundamentals

    Solid understanding of network security principles including TLS/SSL encryption, HTTPS protocols, DNS security mechanisms, and network traffic analysis. Familiarity with network-layer threat detection and prevention concepts essential for building security infrastructure.

  • Zero Trust Security Architecture

    Working knowledge of Zero Trust principles including never trust by default, continuous verification, least privilege access control, and microsegmentation. Understanding how to apply Zero Trust concepts to cloud infrastructure and distributed application architectures.

  • Data Loss Prevention Concepts

    Familiarity with Data Loss Prevention (DLP) strategies including data classification, sensitive data detection, exfiltration prevention mechanisms, and policy-based enforcement. Understanding of DLP system architecture and integration patterns in cloud environments.

  • Cloud Platform Security

    Practical experience with cloud security controls and networking in at least one of AWS, GCP, or Azure. Knowledge of cloud-native security features including Identity & Access Management (IAM), encryption services, VPC configurations, and security group policies.

  • Full Stack Development Exposure

    Willingness and ability to work across the full technology stack from frontend dashboards to backend services to data pipeline infrastructure. Comfort bridging traditional backend systems with modern security-observability platforms and user-facing security tools.

Education

  • Computer Science Degree

    Bachelor of Science (BS) in Computer Science, Computer Engineering, or related field providing foundational computer science theory, algorithms, and systems design knowledge.

  • Equivalent Professional Experience

    Equivalent hands-on professional software engineering experience demonstrating mastery of core computer science concepts, distributed systems thinking, and production software delivery capabilities.

Experience

  • Professional Software Engineering

    Minimum 2+ years of professional software engineering experience building production systems. Should demonstrate progression from completing assigned tasks to owning features end-to-end and working independently on well-scoped problems.

  • Backend or Infrastructure Systems

    Experience building backend services, data processing systems, or infrastructure-level software. Understanding of operational concerns including monitoring, debugging, incident response, and system reliability in production environments.

  • Security or System Hardening

    Prior exposure to security engineering, system hardening, compliance implementation, or security-adjacent infrastructure work. Understanding of how security requirements translate into code and system design constraints.

Skills

Required

  • SQL

    Advanced SQL skills for querying, analyzing security telemetry, writing data transformation pipelines, and designing database schemas for security event storage and analysis at scale.

  • Java

    Production-grade Java development including object-oriented design patterns, multithreading, memory management, and building scalable backend services. Understanding of Java ecosystem for distributed systems and security libraries.

  • Python

    Python proficiency for security automation, data analysis, tooling, scripting, and system integration. Ability to leverage Python security libraries and frameworks for threat detection and analysis workloads.

  • Distributed Systems Design

    Understanding of distributed system patterns including eventually-consistent architectures, message passing, event streaming, service communication, and handling failure scenarios at scale.

  • Network Security

    Foundational knowledge of network security including TCP/IP stack, SSL/TLS encryption, DNS security, network packet analysis, and common network-layer attacks and defenses.

  • Cloud Platform Architecture

    Practical knowledge of AWS, GCP, or Azure including compute services, networking primitives, storage options, identity management, and native security controls available in cloud environments.

  • Secure Code Development

    Ability to write secure code following OWASP principles, input validation, output encoding, cryptographic best practices, and vulnerability-aware programming techniques.

  • Testing and Quality Assurance

    Comprehensive testing mindset including unit testing, integration testing, test automation, and security-focused testing strategies. Experience with testing frameworks and test-driven development.

Preferred

  • Cloud-Native Security Controls

    Nice to have

    Hands-on experience with cloud-native security mechanisms such as VPC Service Controls, Private Link, cloud firewalls, WAF configurations, and native DLP solutions from cloud providers.

  • Egress Control and Network Enforcement

    Nice to have

    Prior experience building or deploying egress control systems, network perimeter enforcement engines, or policy-based network access controls. Understanding of preventing data exfiltration at network boundaries.

  • Policy Engine Development

    Nice to have

    Experience designing or implementing policy engines for security rule evaluation, access control decisions, or data governance enforcement. Understanding of policy evaluation performance at scale.

  • AI-Assisted Development Workflows

    Nice to have

    Familiarity with modern AI-assisted development tools and workflows including LLM-powered coding assistants, prompt engineering, and leveraging AI as a development multiplier in security engineering contexts.

  • Open Source Security Contributions

    Nice to have

    Active contributions to open-source security projects, security research publications, or capture-the-flag competition participation demonstrating applied security expertise and community engagement.

  • Threat Modeling and Detection

    Nice to have

    Experience with threat modeling methodologies, security telemetry collection, anomaly detection algorithms, or building detection-as-code systems for security monitoring.

  • Production Incident Response

    Nice to have

    Experience responding to production security incidents, implementing post-incident mitigations, and designing preventive controls based on incident findings and root cause analysis.

Tech stack

Languages

JavaPythonSQLGo

Frameworks

Spring FrameworkApache KafkagRPC

Databases

Snowflake Data WarehousePostgreSQLElasticsearch

Tools

Git and GitHubKubernetesDockerPrometheus and GrafanaJUnit and pytest

Other

AWS, GCP, or AzureZero Trust Architecture PrinciplesOWASP Security PrinciplesTLS/SSL and cryptography

Compensation

Pay and benefits.

Base·USD 160,000 – 230,000

Benefits

  • Comprehensive Health Coverage

    Medical, dental, and vision insurance plans with competitive coverage for employees and eligible dependents, including preventive care and wellness program access.

  • Retirement Planning

    401(k) retirement savings plan with employer matching contributions to help build long-term financial security and retirement readiness.

  • Generous Paid Time Off

    Competitive vacation days, paid sick leave, and paid parental leave supporting work-life balance and family planning needs.

  • Professional Development

    Learning and development budgets for certifications, conferences, training courses, and educational programs supporting continuous skill growth in security engineering.

  • Equity Compensation

    Stock options or RSU packages providing ownership stake in Snowflake's success and participation in company growth and long-term value creation.

  • Flexible Work Arrangements

    Remote-friendly work policies and flexible scheduling options enabling engineers to maintain productivity and personal commitments.

  • Mental Health Support

    Employee Assistance Program (EAP) with confidential counseling services, mental health resources, and wellness initiatives supporting overall employee wellbeing.

Full posting

Original listing.

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

We are hiring a Software Engineer for our Trust & Platform Security team. This team is building the next generation of cyber security monitoring for Snowflake customers where discovery, detection and remediation occurs in the same system. In the agentic era, threats and vulnerabilities occur at machine speed and scale and we are building a platform to detect and respond to these threats in real time. This team is also responsible for building the next generation of network and data enforcement engines: context aware ingress, data exfiltration protection and unified data movement policies for Snowflake's cloud security infrastructure. You will work at the intersection of security policy and system enforcement, building features that help keep perimeter controls robust, scalable, and integrated with context-aware access frameworks.

AS A SOFTWARE ENGINEER, TRUST & PLATFORM SECURITY AT SNOWFLAKE, YOU WILL:

  • Build and ship components to detect security vulnerabilities and threats, shadow AI and other agentic threats.

  • Develop data loss and ransomware detection mechanisms and ensure signals yield low false positive rates.

  • Write and contribute to design documents for product features, with attention to reliability, latency, and auditability

  • Work with senior engineers and Product Management to turn requirements into well-scoped tasks and deliver them independently

  • Write well-tested, secure code and take part in code reviews

  • Own features through implementation, testing, and production rollout with guidance from senior teammates

OUR IDEAL SOFTWARE ENGINEER, TRUST & PLATFORM SECURITY WILL HAVE:

  • 2+ years of professional software engineering experience

  • Working knowledge of network security fundamentals (TLS/SSL, HTTP/S, DNS), Zero Trust principles, or Data Loss Prevention (DLP) concepts

  • Solid coding skills in SQL, Java, Python and exposure to building distributed or backend systems and willingness for full stack exposure

  • Familiarity with cloud platforms such as AWS, GCP, or Azure, and their security or networking controls

  • Eagerness to learn, take feedback, and grow ownership over larger parts of the system

  • Clear communication and comfort collaborating with cross-functional partners

  • BS/MS in Computer Science, Engineering, or equivalent experience

BONUS POINTS FOR THE FOLLOWING:

  • Exposure to cloud-native security controls (e.g., VPC Service Controls, Private Link)

  • Experience with egress control, network perimeter enforcement, or policy engines

  • Familiarity with AI-assisted development workflows and tooling

  • Contributions to open-source security projects, security research, or CTFs

WHY JOIN OUR TRUST & PLATFORM SECURITY TEAM AT SNOWFLAKE?

You will work on security controls that protect customer data across Snowflake, at a scale few companies operate. This is an early-career role with real ownership: you will ship production features in a high-impact security area while learning from experienced infrastructure and security engineers.

Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com

Interview prep

11 guides for Snowflake

Apply for this position

Redirects to Snowflake's application page.

Other roles

More at Snowflake.

View all 96 roles