Staff Security Engineer, Incident Response (AI)

Location: United States; candidates in other locations must also be US based

Company

Databricks provides a unified Data and AI Platform for data engineering, analytics, applications, and AI agents.

What you will do

• Respond to security incidents, high-priority alerts, and investigations as part of a distributed 24x7 operations and on-call schedule.
• Triage security events and perform analysis and forensics across multiple data sources to determine timelines and impact.
• Develop incident response tooling, automations, and AI- and agentic-platform capabilities.
• Provide technical leadership and influence the direction of the Incident Response team.
• Document technical decisions through design documents and tech talks.
• Mentor junior security responders through guidance, design reviews, and code reviews.

Requirements

• Active or current US government Secret clearance eligibility required; Top Secret preferred.
• Bachelor's degree and 7+ years of Incident Response experience, or a master's degree and 5+ years of experience.
• Cloud security expertise in at least one of AWS, GCP, or Azure, with proficiency in the others.
• Proficiency in AI/LLM and agentic capabilities, plus broad security subject matter expertise.
• Core Incident Response expertise in areas such as DFIR, reverse engineering, network security, storage and access security, sandboxing, or compute security.
• Experience with enterprise security and SaaS applications, SIEM/SOAR, incident response tooling, scripting languages, and AI coding tools.

Nice to have

• Experience building and operating agentic systems in a security setting.
• Top Secret clearance eligibility.

Culture & Benefits

• Work with a close-knit Incident Response team using the Databricks platform for security operations.
• Comprehensive employee benefits and perks, with details varying by region.
• Inclusive workplace committed to diversity and equal employment opportunity.