Senior (Staff) Penetration Tester

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow. Snowflake started with a clear vision: develop a cloud data platform that is effective, affordable, and accessible to all data users. Snowflake developed an innovative new product with a built-for-the-cloud architecture that combines the power of data warehousing, the flexibility of big data platforms, and the elasticity of the cloud at a fraction of the cost of traditional solutions. We are now a global, world-class organization with offices in more than a dozen countries and serving many more. WHAT YOU NEED: - You break things, and you want to break them anywhere, in any cloud - and you have solid 5+ years of experience doing that. - You find and exploit bugs in: - C++, Java, JavaScript, Go, and Python - Kubernetes, AWS, GCP, or Azure - Cloud Native Systems and Applications, Client Side Applications, Micro Services, Database Systems, Drivers, Connectors, AI Agents and Systems, Web Applications, and more - You will have a solid understanding of technologies supporting applications and systems to accurately assess the breadth and impact of risks and solutions. - You are not overly reliant on tools and can use your fundamental understanding of technologies to develop new attack methods. - You are a strong communicator, with a track record of delivering results, who wants to work closely with developers and security engineers on a daily basis. - You have prior experience balancing security and business demands as you perform penetration testing for products going to release. WHAT YOU WILL DO: - Perform penetration testing engagements against a diverse cloud environment and find vulnerabilities in software, systems, and networks. - Set scope, priority based test plans, and timelines for penetration testing engagements. - You will figure out how to test new applications, technologies, protocols, controls, and concepts where there is no out-of-the-box methodology. - Work with security and engineering teams to manage product releases, plan engagements, communicate findings and recommendations, and inform stakeholders. - Partner closely with security engineers in the Product Security program to drive reviews, designs, and controls from outcomes. - Focus primarily on penetration testing, but advocate for and support other processes in the SDLC as needed. WHY YOU SHOULD WORK WITH US: - We are laser focused on doing security better, and we do not tolerate the status quo. - Snowflake is constantly innovating, if you want to further yourself technically there is no better place to be exposed to a wide variety of new technologies. - Snowflake AppSec program is very innovative - think about Threat Modeling as Code, autonomous security champions and agentic driven security. - We have strong demand from our customers, and support fr