Security Engineer

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together.

The Company operates Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc., a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji, Saturn, and other digital services.

Snap Security teams protect the trust and safety of our global community by securing the systems and data that power Snapchat. We safeguard hundreds of millions of Snapchatters every day, ensuring that every product and service is built on a foundation of security and resilience. Our values guide everything we do - from how we anticipate and mitigate threats to how we collaborate across Snap. We move fast, with precision, and always execute with privacy at the forefront.

Join Snap Inc.'s Detection and Response (D&R) team as a Security Engineer. In this role, you will be at the forefront of engineering innovative security solutions, building and deploying robust systems to protect our digital infrastructure and investigating any suspicious activity on our networks as an incident responder. You'll work from our Sydney office in collaboration with global teams in the US and Switzerland, embracing an engineering mindset to effectively identify and neutralise threats across our production environments, corporate infrastructure, and internal tools.

This is not your typical IR or analyst role, we spend large percentages of our time on project work, balancing this with our operational duties such as detection engineering and incident response. If you're ready to make a tangible impact and drive innovative security projects, apply now to join our global team and help shape the future of security at Snap Inc.

Key Responsibilities:

• Build, deploy and maintain large scale security systems across our ecosystem.

• Research, innovate and improve our security capabilities through new and enhanced tooling.

• Develop smart automation strategies to reduce the need for manual alert triage.

• Conduct detection engineering to increase coverage, identifying malicious activities across Snap Inc.'s endpoints, infrastructure, networks, and cloud environments.

• Investigate alerts and potential incidents end-to-end, including digital forensics, malware analysis and threat intelligence as needed.

• Lead incident response efforts and respond to intrusion attempts and suspicious activities, collaborating with multiple Snap Inc. teams.

• Participate in red team exercises and threat simulations in order to identify gaps, improve competencies and expand the team’s knowledge.

Knowledge, Skills & Abilities:

• Strong programming skills in Python and/or Go.

• Practical experience with BeyondCorp or ZeroTrust security models.

• Proven expertise in one or more detection and response related areas such as:

  • digital forensics (forensic artefacts, disk and cloud acquisition and analysis, forensic tooling e.g. GRR, Timesketch)
  • malware analysis (static and dynamic analysis, using tools like IDA Pro and Ghidra)
  • incident management and response (coordinating large scale or impactful security events with multiple stakeholders)
  • host/network intrusion detection (able to parse and understand large and often unfamiliar logs and systems)
  • network telemetry (understanding network flows, PCAPs and technologies like Zeek)
  • threat intelligence (have an understand of how to model a threat actor and their TTPs)
  • threat hunting (know how to find suspicious activity or IOCs across data lakes)

• Understanding of operating system internals, with a core competency in two or more of the following including file and disk structures, forensic process, security controls, hardening, scripting and binary investigations:

  • macOS
  • Windows
  • Linux

• Advanced knowledge of cloud infrastructure, including being able to build and deploy systems and investigate security events across two or more of the below:

  • Kubernetes
  • Google Cloud Platform
  • Amazon Web Services

We welcome applications from candidates who feel they meet some, but not necessarily all, of the qualifications listed above. If you believe you have the potential to contribute to our team, we encourage you to apply.

Minimum Qualifications:

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field

• 3+ years of experience in the field of incident response, detection engineering or related security disciplines

Join Us:

If you're passionate about cybersecurity and eager to make a significant impact by enhancing our security posture, we encourage you to apply. Become part of a forward-thinking team dedicated to protecting our digital ecosystem.

If you have a disability or special need that requires accommodation, please don’t be shy and provide us some information.

"Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week.

At Snap, we believe that having a team of diverse backgrounds and voices working together will enable us to create innovative products that improve the way people live and communicate. Snap is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws. EOE, including disability/vets.

Our Benefits: Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success!