Staff Security Engineer – Incident Response
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Security Engineer protecting Databricks’ data and AI platform through incident response. Analyzing threats, conducting forensics, and building AI-enabled security automation.
Responsibilities:
- Respond to security incidents as part of a distributed 24x7 operations and on-call schedule
- Triage and respond to security events and alerts, ensuring quick and effective containment
- Conduct analysis and forensics across diverse data sources to determine the timeline and impact of security events
- Provide technical leadership and influence team direction
- Develop solutions leveraging AI and agentic platforms to deliver autonomous capabilities, expedite work, and scale the team's impact
- Communicate technical decisions through design documents and technical talks
- Mentor junior security responders through security guidance, design reviews, and code reviews
- Report to the regional Incident Response manager as an individual contributor
Requirements:
- Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience
- Cloud security expertise in at least 1 of AWS, GCP or Azure, and proficiency in the others
- Proficiency in AI/LLM and agentic capabilities; experience building and operating agentic systems in a security setting preferred
- Broad security subject matter expertise
- Expertise in core incident response skills such as DFIR, reverse engineering, traditional network security, storage and access security, sandboxing, and compute security
- Experience with Enterprise Security and SaaS applications
- Working knowledge of a SIEM and SOAR
- Experience building Incident Response Tooling
- Scripting language skills
- Experience with AI coding tools
Benefits:
- Comprehensive benefits and perks; specific benefits depend on the employee's region
- Distributed 24x7 operations and on-call schedule
Similar Jobs
Principal OT Cybersecurity – ICS Security Architect
Principal OT cybersecurity architect leading federal critical-infrastructure modernization for Peraton. Evaluating ICS and enterprise security solutions, vendors, and requirements.
Senior OT Cybersecurity, ICS Security Architect – Part-Time
Part-time OT/ICS cybersecurity architect supporting Peraton’s federal critical-infrastructure modernization program. Evaluating security products, defining requirements, and guiding procurement recommendations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Azure and AWS cloud environments for ShorePoint, a cybersecurity services firm. Driving PQC readiness, automation, identity governance and continuous monitoring.
Cybersecurity Practitioner – SOC, Incident Response, Detection, AppSec
Cybersecurity practitioners advising Mercor’s AI benchmark through paid remote expert interviews. Sharing enterprise defense workflows, evaluation criteria, and feedback on task taxonomy.
IT and Security Generalist
IT and security generalist operating identity, endpoint, automation, and security workflows. Supporting Galileo’s data-driven healthcare practice through monitoring, incident response, and secure systems.
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer-facing assurance.
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer assurance.
Senior Information Systems Security Officer
Senior ISSO leading RMF accreditation and cybersecurity compliance for AnaVation’s federal digital evidence platform. Preparing ATT/ATO packages and managing NIST controls, assessments, and continuous monitoring.
Senior Information Security Manager
Senior Information Security Manager securing Backstory’s AI answers platform for sales teams. Owning preventative controls, compliance, risk reduction, and security tooling.
Senior Cloud Security Engineer – AI Resilience, Security Enhancements
Senior Cloud Security Engineer strengthening cloud security, resilience and AI governance. Form3 operates a cloud-native, multi-cloud payments platform.
Information Security Consultant – SOC IR L3
Information Security Consultant leading complex cyber incident investigations for Eurofins, an international life sciences and laboratory testing company. Strengthening SOC capabilities through forensics, remediation, and response coordination.
SAP Basis Consultant, Security Consultant
SAP Basis and Security Consultant managing administration, performance, authorizations, and compliance for enterprise SAP landscapes. Supporting upgrades, migrations, and cloud transformation projects.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer managing endpoint, SIEM, vulnerability, and cloud security for clients. Securing AI systems through authorization, monitoring, and adversarial testing.
Senior Product Security Engineer – AI, DevSecOps
Senior Product Security Engineer securing McKesson’s healthcare software and AI systems. Designing cloud, CI/CD, and DevSecOps controls for resilient products.
Director, Application Security
Zillow security director leading Application Security and Security Architecture for a major U.S. real estate platform. Driving secure software, cloud security, and executive risk strategy.
Security Engineer, IAM
Analista de Segurança IAM administrando identidades, permissões e controles Cloud/SaaS no Jusbrasil. Protegendo dados jurídicos e apoiando o crescimento seguro da plataforma.
Director, Physical Security Solutions
Director leading ANM’s physical security and low-voltage infrastructure solutions organization. Driving multi-state delivery operations, financial performance, client experience, and team development.
Enterprise Security Architect – Senior
Enterprise Security Architect securing DHS ICAM applications and services. Integrating controls, supporting ATO activities, remediating vulnerabilities, and managing POA&Ms for federal environments.
Insider Risk Security Engineer
Insider Risk Security Engineer strengthening Zscaler’s cloud security platform against insider threats. Leading detection engineering, investigations, and defensible playbooks across enterprise security operations.
Senior Electronic Security Engineer
Senior Electronic Security Engineer designing, integrating, and sustaining electronic security systems for Cambridge’s U.S. government defense and security missions. Fully remote with customer-site travel.