We are seeking a Threat Intelligence focused security engineer to join our Detection and Response (D&R) team, based in Sydney.

In this dynamic role, you will be instrumental in tracking sophisticated threat actors and engineering innovative security solutions. Collaborating with our global teams in the US and Switzerland, you will adopt a threat-informed engineering mindset. Your responsibilities will include identifying and neutralizing threats across our production environments, corporate infrastructure, and internal tools, as well as protecting against and responding to any suspicious activity across our digital infrastructure.

This isn’t your typical analyst position. We dedicate significant time to research, innovation, and development, ensuring Snap stays ahead of evolving adversaries. If you’re ready to make a tangible global impact by securing a platform that serves hundreds of millions of users worldwide, join us and help shape the future of security at Snap Inc.

What You’ll Do:

• Identify, analyze, and develop threat intelligence on emerging adversary tactics, techniques, and procedures (TTPs), across both APT and cybercrime ecosystems.

• Proactively track, model, and monitor threat actors and campaigns that may impact Snap Inc.

• Research and innovate new detection and response capabilities, developing tools and automations to enhance threat hunting and incident response.

• Leverage AI and automation to build scalable, industry-leading intelligence and response systems.

• Design, pilot, and implement robust logging and alerting systems to detect and prevent malicious activity across Snap’s endpoints, infrastructure, networks, and cloud environments.

• Lead and coordinate incident response efforts, collaborating across multiple Snap teams to investigate and mitigate threats.

• Partner with global stakeholders to drive continuous improvement in Snap’s detection, intelligence, and response capabilities

Knowledge, Skills & Abilities:

• Proven experience in one or more of the following detection and response areas: threat intelligence, threat hunting, digital forensics, malware analysis, incident response/management, host/network intrusion detection.

• Strong development skills in Python and/or Go

• Understanding of operating system internals, with a core competency in two or more of the following including file and disk structures, forensic process, security controls, hardening, scripting and binary investigations:

  • macOS

  • Windows

  • Linux

• Advanced knowledge of cloud infrastructure, including being able to build and deploy systems and investigate security events across two or more of the below:

  • Kubernetes

  • Google Cloud Platform

  • Amazon Web Services

Minimum Qualifications:

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field

• 3+ years of experience in the field of incident response, detection engineering or related security disciplines