Senior Security IR Engineer - AI-Driven Incident Response

Menlo Ventures; Schweiz; Vor Ort; EUR 104.000 - 156.000; Vollzeit

Zusammenfassung

Databricks is seeking an Incident Response specialist to join a 24x7 security operations team. You will conduct forensics, triage high-priority alerts and contribute to automations and agentic capabilities to scale response.

You will mentor junior responders and communicate technical decisions through docs and talks. Ideal candidates bring a strong cloud security background (AWS/GCP/Azure), expertise in DFIR and SIEM/SOAR, and experience with enterprise SaaS security.

Qualifikationen

• Bachelor's Degree AND 4+ years experience in Incident Response work OR Master's Degree AND 2+ years experience.
• Deep cloud security background in AWS, GCP or Azure with knowledge of others.
• Knowledge of AI/LLM and agentic capabilities, including prompting and MCP/agents.
• Broad security subject matter expertise.
• Expertise in IR skills (DFIR, Reverse Engineering, Network/Storage/Security, Sandboxing, Compute).
• Experience with Enterprise Security and SaaS apps.
• Working knowledge of SIEM and SOAR.
• Experience building Incident Response tooling and scripting.

Aufgaben

• Conduct security analysis and forensics across data sources.
• Respond to high-priority alerts and incidents on a 24x7 schedule.
• Build automations and agentic capabilities to scale IR.
• Mentor junior responders via guidance, design reviews and code reviews.
• Communicate decisions through design docs and tech talks.

Kenntnisse

Cloud security

AI/LLM agentic skills

IR tooling & scripting

DFIR expertise

Reverse engineering

Network security

SIEM & SOAR

SaaS security

Enterprise security

Cloud platforms (AWS/GCP/Azure)

Ausbildung

Bachelor's degree

Master's degree

Jobbeschreibung

Databricks is seeking an Incident Response specialist to join a 24x7 security operations team. You will conduct forensics, triage high-priority alerts and contribute to automations and agentic capabilities to scale response.

You will mentor junior responders and communicate technical decisions through docs and talks. Ideal candidates bring a strong cloud security background (AWS/GCP/Azure), expertise in DFIR and SIEM/SOAR, and experience with enterprise SaaS security.