Information Systems Security Engineer

The role

This person will lead security control assessments for national security deployments. They will own security documentation and manage the process of getting systems authorized to operate.

What you will do

• Lead the security control assessment for an assigned deployment.
• Produce the assessment plan, evidence collection schedule, and residual risk reports.
• Direct engineers and security staff producing control artifacts.
• Review produced evidence and identify gaps in requirements.
• Explain control implementations to government security reviewers.
• Translate reviewer findings back to the engineering team.
• Track authorization status and blockers.
• Report status weekly to the engineering lead and the program.

Required qualifications

• Taken at least one system through authorization to operate under a government security control framework (NIST 800-53 / RMF, FedRAMP, or the DoD RMF and its Impact Levels).
• Ability to read an engineering implementation and decide which control it satisfies and what evidence it produces.
• Experience working with government authorizing officials or security control assessors.
• Ability to document assessment scope, control status, evidence gaps, and residual risk.
• Eligible for TS/SCI with a full-scope polygraph, or already hold it.

About the company

Snowflake is powering the era of the agentic enterprise and is scaling its team to enable and accelerate growth.