Produce the assessment plan, the evidence collection schedule and the residual risk that goes to the authorizing official, and keep them current.
Direct the engineers and security staff producing control artifacts. Tell them which evidence to collect, review what they produce, and catch gaps in the requirements before they surface during assessment.
Be the person who can explain a Snowflake control implementation to a government security reviewer, and explain a reviewer's finding back to the engineering team in terms they can act on.
Track authorization status and blockers, and report them weekly to the engineering lead and the program.
WHAT YOU BRING
You have taken at least one system through authorization to operate under a government security control framework (NIST 800-53 / RMF, FedRAMP, or the DoD RMF and its Impact Levels), and you can point to the package you were responsible for.
You can read an engineering implementation and decide which control it satisfies and what evidence it produces.
You have worked with government authorizing officials or security control assessors, and you know what they reject and why.
You write the plan down. Assessment scope, control status, evidence gaps and residual risk live in a document the team can run without you, not in your head.
You are eligible for TS/SCI with a full-scope polygraph, or already hold it.
HOW THIS TEAM WORKS
The ISSE does not work alone and does not do all the collection. Engineers and supporting security staff produce the artifacts; you decide what is needed, review it, and own the result. The role reports into national security engineering and sits in the deployment's weekly engineering and security cadence. The work is done from the Washington, DC area, with regular time on site.
Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.
How do you want to make your impact?
For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com http://careers.snowflake.com
