Sr. Manager, Security — Continuous Monitoring v 2.0
About this role
Leading the Continuous Monitoring team involves overseeing the engineering infrastructure that keeps security control postures visible, measurable, and defensible across cloud environments, SaaS platforms, identity systems, and enterprise applications. The engineering manager directs the creation of automation that assesses whether security controls actually function, catching drift, coverage gaps, and control failures immediately rather than waiting for audits. Responsibilities include owning the roadmap for compliance automation, building software engineering pipelines in Python, and partnering closely with GRC, IT, Legal, and Engineering departments.
This role exists to ensure Databricks maintains a verifiable and current control posture as the company scales its cloud footprint, regulatory obligations, and AI governance requirements. A successful candidate possesses the technical depth to review production Python code and data pipelines, combined with the leadership judgment to prioritize controls that genuinely reduce risk. The position suits an experienced engineering leader who can balance software engineering rigor with security compliance domains.
What you will do
- Manage and grow a team of security software engineers by providing actionable feedback, career development, and setting high engineering standards.
- Own the strategy and roadmap for the continuous monitoring platform, spanning control state collection, posture assessment, and remediation tracking.
- Establish security posture dashboards and reporting metrics to give leadership an accurate view of control health and exposure.
- Partner cross-functionally with GRC, Enterprise Security, Product Security, IT, and Legal to ensure monitoring aligns with policies and audit standards.
- Lead build-versus-buy evaluations for CSPM, SSPM, and GRC automation tooling while managing operating costs and cloud spend.
- Anticipate future measurement needs by tracking architectural changes, new SOC 2 criteria, FedRAMP rules, and emerging AI governance frameworks.
What you need
- Bring at least 2 years of prior management experience leading engineering or security engineering teams.
- Possess typically 12+ years of overall experience, or an advanced degree combined with at least 8 years of relevant work.
- Focus experience preferably on security engineering, security posture monitoring, or compliance automation.
- Demonstrate sufficient technical depth to read and critique Python code produced by the team.
Skills and tech stack
Questions candidates ask
What is the location policy for this role?
While candidates in the listed California location are encouraged for this role, candidates in other remote locations will be considered.
What is the salary range for the position?
The salary range for this position is $228,600 to $314,250 USD.
What technologies and languages does the team use?
The team writes production Python, operates data pipelines against cloud and SaaS APIs, and integrates with GRC and security tooling.
What frameworks does the team measure control posture against?
The team demonstrates control posture against frameworks including SOC 2, ISO 27001, FedRAMP, PCI DSS, and emerging AI governance requirements.