Information Systems Security Engineer

At Snowflake, we are powering the era of the agentic enterprise.

We seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work.

You will lead the security control assessment for an assigned deployment, from control selection and tailoring through the body of evidence to authorization.

Responsibilities:

• Lead the security control assessment for an assigned deployment
• Produce the assessment plan, the evidence collection schedule and the residual risk that goes to the authorizing official
• Direct the engineers and security staff producing control artifacts
• Explain a Snowflake control implementation to a government security reviewer
• Track authorization status and blockers, and report them weekly to the engineering lead and the program

Requirements:

• You have taken at least one system through authorization to operate under a government security control framework (NIST 800-53 / RMF, FedRAMP, or the DoD RMF and its Impact Levels)
• You can read an engineering implementation and decide which control it satisfies and what evidence it produces
• You have worked with government authorizing officials or security control assessors
• You write the plan down
• You are eligible for TS/SCI with a full-scope polygraph, or already hold it