Information Systems Security Engineer

A principal information systems security engineer in Snowflake's national security engineering group, based in the Washington, DC area with regular time on site, who owns the security documentation behind its classified deployments' authorisations to operate, starting with Arc Reactor for a US government customer. The engineer leads the control assessment from selection and tailoring to authorisation, writes the assessment plan, evidence schedule and residual risk statement, directs the engineers producing control artifacts, explains implementations to government reviewers and findings back to engineers, and reports progress weekly.

It asks for at least one system taken through ATO under NIST 800-53 RMF, FedRAMP or DoD RMF, experience with authorising officials, clear written plans, and TS/SCI with full-scope polygraph eligibility.