Senior (Staff) Penetration Tester

About the Position

Senior (Staff) Penetration Tester

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset - who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow.

Snowflake started with a clear vision: develop a cloud data platform that is effective, affordable, and accessible to all data users. Snowflake developed an innovative new product with a built-for-the-cloud architecture that combines the power of data warehousing, the flexibility of big data platforms, and the elasticity of the cloud at a fraction of the cost of traditional solutions. We are now a global, world-class organization with offices in more than a dozen countries and serving many more.

Location

Warsaw, Poland

Employment Type

Full-time

Department

Engineering

About the Role

At Snowflake, we are laser-focused on doing security better, and we do not tolerate the status quo. Snowflake is constantly innovating, if you want to further yourself technically there is no better place to be exposed to a wide variety of new technologies. Snowflake AppSec program is very innovative - think about Threat Modeling as Code, autonomous security champions, and agentic-driven security. We have strong demand from our customers, and support from the business for security. We are a great team that combines a diverse set of backgrounds and skills. Did we mention we are one of the fastest-growing software companies, ever? The opportunity for impact is enormous.

Responsibilities

• Perform penetration testing engagements against a diverse cloud environment and find vulnerabilities in software, systems, and networks.
• Set scope, priority-based test plans, and timelines for penetration testing engagements.
• Figure out how to test new applications, technologies, protocols, controls, and concepts where there is no out-of-the-box methodology.
• Work with security and engineering teams to manage product releases, plan engagements, communicate findings and recommendations, and inform stakeholders.
• Partner closely with security engineers in the Product Security program to drive reviews, designs, and controls from outcomes.
• Focus primarily on penetration testing, but advocate for and support other processes in the SDLC as needed.
• Develop automated security testing tools and security automation frameworks to enhance scalability and eliminate recurring vulnerabilities.

Requirements

• 5+ years of experience in penetration testing.
• Expertise in finding and exploiting bugs in:
  • Java, TypeScript, JavaScript, Go, Python, or C++
  • Kubernetes, AWS, Azure, or GCP
  • Cloud Native Systems and Applications, AI Agents and Agentic workloads, Client Side Applications, Micro Services, Database Systems, Drivers, Connectors, Web Applications, and more
• Solid understanding of technologies supporting applications and systems to accurately assess the breadth and impact of risks and solutions.
• Ability to use fundamental understanding of technologies to develop new attack methods.
• Strong communication skills with a track record of delivering results.
• Prior experience balancing security and business demands as you perform penetration testing for products going to release.

Nice to Have

• Experience with security automation and threat modeling as code.
• Familiarity with agentic-driven security practices.

We Offer

• Be part of a fast-growing, innovative company.
• Exposure to a wide variety of new technologies.
• Innovative AppSec program with a focus on Threat Modeling as Code, autonomous security champions, and agentic-driven security.
• Strong demand from customers and support from the business for security.
• A diverse team with a variety of backgrounds and skills.
• Opportunity for significant impact and growth.

About the Company

Snowflake is a global, world-class organization with offices in more than a dozen countries and serving many more. We are committed to powering the era of the agentic enterprise and are looking for individuals who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?