Principal Threat Intelligence Engineer

Snowflake

Principal Threat Intelligence Engineer advancing Snowflake’s cloud security through AI-enabled intelligence. Engineering threat workflows, tracking actors, and translating intelligence into detections and risk-based defenses.

Posted 8/15/2026full-timeRemote • California • 🇺🇸 United StatesLead💰 $249,000 - $357,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat intelligence strategy, including the ability to operationalize threat intelligence and build AI-assisted workflows for intelligence analysis. Proficient in collaborating across security functions and communicating effectively with technical stakeholders.

Highest-signal resume keywords

Threat Intelligence StrategyPython ProgrammingAI-Assisted WorkflowsThreat Detection MethodologiesCloud Security Risks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat IntelligenceIncident ResponseData AnalysisAutomationIntelligence ReportingThreat HuntingSQLHigh-Level ProgrammingInvestigative MethodologiesRisk Assessment

Soft Skills

CollaborationMentoringCommunication

Tools & Technologies

OSINT ToolsAWSAzureGCPSecurity Data Handling

Industry Keywords

Cyber Threat ResearchAdversary IntelligenceSupply-Chain IntelligenceFraud EcosystemsCloud-Native Environments

Tech Stack

Tools & technologies

AWSAzureCloudGoGoogle Cloud PlatformPythonSQL

About the role

Key responsibilities & impact

Define and mature Snowflake’s Threat Intelligence strategy, including investments in people, processes, engineering, and AI-enabled capabilities
Identify, profile, and track threat actors targeting Snowflake, customers, partners, and the ecosystem
Translate threat intelligence into actionable outcomes and security priorities
Produce intelligence reports, assessments, briefs, and leadership-ready communications
Engineer automations, collection pipelines, enrichment workflows, and analyst tooling
Build and improve AI-assisted intelligence workflows for triage, enrichment, summarization, monitoring, and threat-informed hunts
Partner with Threat Detection, Incident Response, and other security teams to create detections, threat hunts, investigative pivots, and control recommendations
Monitor alerts, intelligence feeds, vendor reporting, and external developments
Drive standards for curating, evaluating, delivering, and measuring intelligence
Mentor engineers and analysts and raise technical, analytic, and operational maturity

Requirements

What you’ll need

Deep experience in threat intelligence, including adversary, intrusion, supply-chain, identity, domain intelligence, or threat-informed defense
Strong understanding of nation-state actors, criminal organizations, ransomware groups, fraud ecosystems, and enabling platforms
Experience operationalizing threat intelligence with detection, incident response, product security, cloud security, and anti-abuse teams
Strong engineering skills with Python or Go, automation, and data-heavy security workflows
Experience building AI-assisted workflows for intelligence analysis, research triage, summarization, collection, prioritization, or investigative support
Ability to research threat actor TTPs, infrastructure, targets, and objectives and map risks to cloud-native environments
Experience with OSINT tools, data sources, investigative methodologies, and intelligence reporting
Strong understanding of threat hunting and threat detection methodologies
Risk-based approach to security and ability to prioritize by business impact and threat conditions
Significant experience in threat intelligence, cyber threat research, intelligence engineering, or related security disciplines
Experience tracking sophisticated threat actors targeting cloud-native and SaaS environments
Experience writing code in Python, Go, or another high-level programming language
Experience using SQL and Python to handle security data programmatically at scale
Experience collaborating across security functions and communicating with technical stakeholders and leadership
Strong understanding of enterprise security controls, threat hunting, and detection methodologies
Experience with AWS, Azure, or GCP and cloud/SaaS security risks
Snowflake employees must follow confidentiality and security standards and the company data security plan

Benefits

Comp & perks

Bonus and equity plan eligibility
Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
401(k) retirement plan
Flexible spending account
Health savings account
At least 12 paid holidays
Paid time off
Parental leave
Employee assistance program
Other company benefits