Information Systems Security Engineer

Information Systems Security Engineer (Principal)

About the role

Snowflake's national security deployments are authorized to operate inside classified environments, and each authorization stands or falls on the security documentation behind it. This role owns that documentation. You assess the system against its security control baseline, assemble the evidence the authorizing official reviews, and you are accountable for the package getting to authorization on schedule.

Arc Reactor, a classified deployment for a US government customer, is the immediate assignment. The same work will apply to the deployments that follow it.

What you will do

• Lead the security control assessment for an assigned deployment, from control selection and tailoring through the body of evidence to authorization.
• Produce the assessment plan, the evidence collection schedule and the residual risk that goes to the authorizing official, and keep them current.
• Direct the engineers and security staff producing control artifacts. Tell them which evidence to collect, review what they produce, and catch gaps in the requirements before they surface during assessment.
• Be the person who can explain a Snowflake control implementation to a government security reviewer, and explain a reviewer's finding back to the engineering team in terms they can act on.
• Track authorization status and blockers, and report them weekly to the engineering lead and the program.

What you bring

• You have taken at least one system through authorization to operate under a government security control framework (NIST 800-53 / RMF, FedRAMP, or the DoD RMF and its Impact Levels), and you can point to the package you were responsible for.
• You can read an engineering implementation and decide which control it satisfies and what evidence it produces.
• You have worked with government authorizing officials or security control assessors, and you know what they reject and why.
• You write the plan down. Assessment scope, control status, evidence gaps and residual risk live in a document the team can run without you, not in your head.
• You are eligible for TS/SCI with a full-scope polygraph, or already hold it.

How this team works

The ISSE does not work alone and does not do all the collection. Engineers and supporting security staff produce the artifacts; you decide what is needed, review it, and own the result. The role reports into national security engineering and sits in the deployment's weekly engineering and security cadence. The work is done from the Washington, DC area, with regular time on site.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com