Security Engineer, Threat Intelligence

Written by the T&S Network from Snap's posting.

Threat intelligence and detection and response engineering for Snap's security team, protecting Snapchat's production systems, corporate infrastructure and internal tools. The work covers tracking APT and cybercrime adversaries and building the detection, hunting and incident response tooling that acts on that intelligence. The posting places the role on the Detection and Response team, based in Sydney, working with teams in the US and Switzerland.

What you'd do

• Analyze emerging adversary TTPs across APT and cybercrime activity and develop threat intelligence from them.
• Track, model and monitor threat actors and campaigns that could affect Snap.
• Build tools and automations to improve threat hunting and incident response.
• Design, pilot and deploy logging and alerting across endpoints, networks, infrastructure and cloud environments.
• Lead and coordinate incident response work across multiple Snap teams.
• Use AI and automation to build intelligence and response systems.
• Work with global stakeholders to improve detection, intelligence and response capabilities.

What it asks for

• A bachelor's degree in computer science, engineering or information systems, or a related technical field, or equivalent years of work experience.
• At least 3 years in incident response, detection engineering or a related security discipline.
• Demonstrated hands-on work in threat intelligence, threat hunting, forensics, malware analysis, incident response or host and network intrusion detection.
• Strong development skills in Python and/or Go.
• Working knowledge of operating system internals on two or more of macOS, Windows and Linux.
• Advanced knowledge of cloud infrastructure, building systems and investigating security events on two or more of Kubernetes, Google Cloud Platform and AWS.

Worth knowing

• Office work expected four days per week under the company's default together policy.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Snapnorth_east before you apply. If we got something wrong, report this listing.