Snowflake

Snowflake

Incident Response Engineer

US-CA-Bay Area-Remote · Mid

Sponsorship not specifiedDetected 4 days ago
PythonSnowflakeAWSGCPAzureDockerKubernetesLLMsAgentic AICybersecuritySIEMSOARSOC OperationsDetection EngineeringIncident Response

Stay score

odds of building a lasting career here

42Risky
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 84 green-card filings in this occupation, 100% were for a worker who already held the job.

Green-card follow-through: 74%

Of 57 labor certifications old enough to have been used, 15 expired without the employer filing the next step. Median time from filing to decision: 502 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

123 transfer filings in the last year, covering 968 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work.
  • You don't just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact.
  • At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

Nice to have

  • Join a high-impact team of security experts to scale security at one of the fastest-growing software companies ever
  • Spearhead an agentic approach to Incident Response by deploying, guiding, and refining autonomous AI agents that execute initial triage, context gathering, and rapid investigation alongside human Incident Commanders
  • Participate in a periodic on-call rotation, which may involve non-traditional working hours
  • 2+ years of relevant experience in incident response or security operations preferred
  • Strong experience in incident response, security investigations, and running incidents as the Incident Commander
  • Advanced experience using security stack capabilities (EDR, SIEM, SOAR, DLP) across endpoints, identity providers, SaaS, and cloud workloads
  • Deep familiarity with AI/LLM tooling, security copilots, and AI-driven telemetry to accelerate investigations, threat triage, and post-incident reporting
  • Knowledge of securing frontier AI infrastructure, including model training and serving pipelines and AI agent permissions

Compensation

  • For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com http://careers.snowflake.com

Company info

  • At Snowflake, we are powering the era of the agentic enterprise.
  • We are hiring a Security Incident Response Engineer to join our Incident Response team.
  • You will work across Detection, Product Security, Cloud, Legal, and HR, see incidents end to end, and turn what you learn into lasting improvements to how Snowflake protects its customers and its people.

This listing is sourced directly from Snowflake's careers page and normalized into a canonical job model.