Anti-Abuse Security Engineer, Product Security

Snowflake•Bellevue, WA

54d

About The Position

Snowflake is about empowering enterprises to achieve their full potential — and people too. With a culture that’s all in on impact, innovation, and collaboration, Snowflake is the sweet spot for building big, moving fast, and taking technology — and careers — to the next level. Build the future of data. Join the Snowflake team.The Anti-abuse team at Snowflake is responsible for protecting Snowflake and our customers from abuse on the Snowflake platform. You will have the opportunity to help set the direction of the anti-abuse roadmap and Product Security while working closely with other teams at Snowflake. As an Anti-Abuse Security Engineer, you will design, build, and operate systems that protect our platform, customers, and data from abuse, misuse, and fraud. You’ll work at the intersection of security engineering, data analytics, and machine learning, developing prevention controls, detections, and automation that mitigate abuse activity across our ecosystem. We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.

Requirements

Bachelor's degree in Computer Science or related technical field or equivalent practical experience.
4+ years of experience with anti-abuse AppSec, threat modeling, and/or secure architecture.
Understanding of common abuse patterns (e.g., ATO, scraping, spam, fraud, privilege misuse).
Proficiency in Python, SQL, or a similar language for building detections and data pipelines.
In-depth knowledge of anti-abuse solutions, cloud, application security, network security, and/or infrastructure security, LLMs.
Applied knowledge of securing AWS, Azure, and other public cloud providers
Experience performing source code reviews across various languages (e.g. Java, Go)
Working knowledge of malware detection and best practices
Ability to assess engineering designs and architecture diagrams for abuse risks
Ability to assess abuse risks within an application or feature
Experience communicating abuse risks and roadmaps to senior leadership
Experience designing and implementing anti-abuse solutions
Experience contributing to the security anti-abuse community such as presenting at conferences or meetups.

Nice To Haves

Master's degree or PhD in Computer Science or related technical field.
Skilled in writing, debugging, and optimizing SQL queries to support data-driven decisions and operations.
Experience with cloud environments (AWS, GCP, Azure) and their security/abuse detection tooling.
Familiarity with ML-based detection systems, feature engineering, or anomaly detection methods.

Responsibilities

Understand the abuse risks faced by Snowflake and our customers.
Design and deploy the anti-abuse controls for Snowflake features, including compromised account detections, data exfiltration detections, LLMs, the newest, highest risk, features such as Snowflake Intelligence, data sharing, and future engineering challenges as Snowflake grows.
Work directly with senior engineers and management to illustrate abuse risks, threats, exploits, to guide business decisions.
Research, plan, and build anti-abuse architectures for Snowflake products and features
Provide designs and reference implementations for new anti-abuse features
Research new services, controls, or features that can help protect the product and our customers from abuse.