Security Engineer, Anti-Abuse, Streamlit Community Cloud

JOB DESCRIPTION
Build the future of data. Join the Snowflake team.
We are looking for motivated, passionate experts in security engineering, fraud and anti-abuse to focus on protecting Streamlit Community Cloud. Streamlit is an open-source Python library that makes it easy to create and share beautiful, custom web apps for machine learning and data science. As a member of the Security and Anti-Abuse team, you’ll be responsible for building tools and strategies to defend Streamlit Community Cloud and Snowflake from bad actors and abuse.
In this role, you will work with cross-functional partners from many teams including the Streamlit team, threat detection, incident response, and product security to analyze abuse vectors and define roadmaps and strategies. You will be responsible for anticipating and protecting against abuse threats, building necessary tools, and defining abuse detection and response playbooks.
RESPONSIBILITIES :
Understand and identify gaps in our anti-abuse strategy and work with stakeholders to develop an anti-abuse roadmap for Streamlit Community Cloud.
Evaluate the capabilities of existing security tools to detect abuse (e.g., cryptomining on the platform) and make recommendations when to buy and when to build in-house.
Work with stakeholders to develop, integrate and deploy abuse detection, prevention, and response capabilities.
Consult with development teams to provide guidance on new features and anti-abuse recommendations.
Operate and continuously improve existing abuse capabilities.
MINIMUM QUALIFICATIONS :
Bachelor's degree in Computer Science or related technical field or equivalent practical experience.
Fluency in one or more programming or scripting languages: Java, Python, C++, Go, JavaScript.
Knowledge of security engineering, computer and network security, security protocols, and applied cryptography.
Expert understanding of software security architecture and design, threat modeling, code review, SDLC best practices, and mitigations for common application security issues
Experience deploying and customizing security tools like vulnerability scanners, static analyzers, web application firewalls, endpoint security monitors to detect abuse, security threats and other risks like cryptomining, fraud detection, obfuscation/evasion techniques, etc.
PREFERRED QUALIFICATIONS :
Experience designing, testing, and maintaining anti-abuse solutions and/or abuse detection and response playbooks
Prior experience working in a high growth, cloud native technology company
Understanding of modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
Ability to write SQL queries and build dashboards, metrics, and reports to drive security outcomes
Experience using CI/CD pipelines to perform automated security testing
The following represents the expected range of compensation for this role: The estimated base salary range for this role is $188,000 - $287,500.Additionally, this role is eligible to participate in Snowflake’s bonus and equity plan.The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. How do you want to make your impact?