Senior Penetration Tester

Build the future of data. Join the Snowflake team.

There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow.

Snowflake started with a clear vision: develop a cloud data platform that is effective, affordable, and accessible to all data users. Snowflake developed an innovative new product with a built-for-the-cloud architecture that combines the power of data warehousing, the flexibility of big data platforms, and the elasticity of the cloud at a fraction of the cost of traditional solutions. We are now a global, world-class organization with offices in more than a dozen countries and serving many more.

WHAT YOU WILL DO: 

• Develop tools, methodologies and infrastructure to support penetration testing engagements in a variety of cloud environments and novel platforms.
• Perform penetration testing engagements against a diverse cloud environment and find vulnerabilities in software, systems, and networks.
• Set scope, objectives, and timelines for penetration testing engagements and leverage data to create useful metrics.
• Work with security and engineering teams to communicate findings, recommendations, and knowledge to key stakeholders.
• Play a critical role in building an AppSec program that has a wide scope and impact.

• We are laser focused on doing security better, and we do not tolerate the status quo.
• Snowflake AppSec program is very innovative - think about Threat Modeling as Code, autonomous security champions and developer-driven security where the engineers write security unit tests themselves.
• We are exploring new security domains across clouds and through the Snowflake platform.
• We have strong demand from our customers, and support from the business for security.
• We are a great team that combines a diverse set of backgrounds and skills.
• Did we mention we are one of the fastest-growing software companies, ever? The opportunity for impact is enormous.

Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. 

• You break things, and you want to break them anywhere, in any cloud - and you have solid 5+ years of experience doing that.
• You eat and sleep offensive security research, bug bounties, CTFs, fuzzing, tools, and techniques.
• You find and exploit bugs in:
• C++, Java, JavaScript, Go, and Python
• Kubernetes, AWS, GCP, or Azure
• Memory management, namespaces, cgroups, etc.
• You have a passion for writing code to solve problems combined with an interest in Offensive Security.
• You can demonstrate a strong background in one of the following languages:
• Golang, Python, Java, JavaScript, C++, C
• Strong communications skills to comfortably work cross-functionally across the organization.
• You are a strong communicator who is comfortable working cross-functionally, with a track record of delivering results.