Latest AI JobsBrowse Jobs
Databricks logo

Staff Security Engineer, Incident Response

DatabricksRemote - CaliforniaSecurity
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Experience
Senior · 5+ yrs
Posted
8 Oct 2026
Status
Open · checked 7d ago

About this role

The Staff Security Engineer, Incident Response is a full-time remote position at Databricks in California, or other US locations, suited for an experienced security professional with a background in incident response and cloud platforms. This role focuses on protecting enterprise data, employees, and customers through advanced threat mitigation, forensics, and automation.

Role Overview

Databricks seeks a Staff Security Engineer, Incident Response to operate as an individual contributor reporting to the regional IR manager. The position involves safeguarding enterprise assets using the internal Databricks platform for near-real-time log analytics, alerting, and forensics while contributing to scalable automation efforts.

Key Responsibilities

Participate in a distributed 24x7 operations and on-call schedule to respond to security incidents.
Triage and address security alerts to ensure rapid and effective containment.
Perform analysis and forensics across multiple data sources to establish timelines and event impacts.
Provide technical leadership and shape team direction.
Build solutions utilizing AI and agentic platforms to deliver autonomous capabilities and scale team operations.
Share technical decisions through design documentation and tech talks while mentoring junior personnel through reviews and guidance.

Requirements

Active or current US GOV Secret clearance eligibility, with Top Secret preferred.
Bachelor's Degree with at least 7 years of incident response experience, or a Master's Degree with a minimum of 5 years of experience.
Cloud security proficiency across AWS, GCP, or Azure, with expertise in at least one.
Knowledge of AI, LLMs, and agentic capabilities, ideally with experience building agentic systems for security.
Broad security subject matter expertise alongside core incident response skills such as DFIR, reverse engineering, network security, or compute security.
Experience with enterprise security, SaaS applications, SIEM, SOAR, and incident response tooling.
Scripting language capabilities and experience with AI coding tools.

Skills and Tools

AWS
GCP
Azure
SIEM
SOAR
AI/LLMs
Scripting Languages

Salary and Benefits

Databricks provides comprehensive perks and benefits tailored to employee needs across different regions.

About the Company

Databricks operates as the data and AI company, providing a unified platform utilized by over 20,000 organizations globally, including a majority of the Fortune 500. The enterprise platform incorporates tools such as Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog, supported by more than 30 global offices and headquarters in San Francisco.

How to Apply

To apply for this role, please visit the official Databricks careers page.

Skills and tech stack

Questions candidates ask

Where is this job located?

The role is primarily remote based out of California, though US-based candidates in other locations are also considered.

What security clearance is required?

Candidates must have an active or current US GOV Secret clearance eligibility, with Top Secret clearance preferred.

What education and experience are needed?

Applicants need either a Bachelor's Degree with 7+ years of incident response experience or a Master's Degree with 5+ years of experience.

Does the role involve on-call duties?

Yes, engineers participate in a distributed 24x7 operations and on-call schedule.

Ready to apply?

The application is on the official Databricks careers page.

Apply on company site