Senior Incident Response Engineer: AI-Driven Security

Databricks Inc.; Italia; On-site; EUR 110,000 - 170,000; Full time

Job summary

Databricks Inc. is seeking a Staff Security Engineer, Incident Response to join our Incident Response (IR) team.

You will be an individual contributor responsible for security analysis, forensics, and responding to high-priority alerts, while contributing to automation and agentic capabilities to scale IR across our platforms. You will operate in a distributed 24x7 environment, triage events, and mentor junior responders.

Qualifications

• Bachelor's degree in a relevant field and 7+ years in Incident Response work.
• Cloud security expertise in AWS, GCP or Azure, and proficiency in the others.
• Proficiency in AI/LLM and agentic capabilities. Experience with building and operating agentic security systems.
• Broad security subject matter expertise across IR disciplines.
• Experience with security tooling, scripting and enterprise security & SaaS apps.

Responsibilities

• Respond to incidents as part of a distributed 24x7 operations and on-call schedule.
• Triage and respond to security events and alerts to contain threats quickly.
• Conduct analysis and forensics to determine the timeline and impact of security events.
• Provide technical leadership and influence team direction in IR.
• Develop automation and agentic capabilities to scale incident response.
• Communicate decisions through design docs and tech talks, and mentor junior responders.

Skills

Incident Response

Cloud security

AI/LLM

Agentic systems

DFIR

Reverse engineering

Scripting

SaaS security

Education

Bachelor's degree in a relevant field

Master's degree in a relevant field

Tools

SIEM

SOAR

Job description

Databricks Inc. is seeking a Staff Security Engineer, Incident Response to join our Incident Response (IR) team.

You will be an individual contributor responsible for security analysis, forensics, and responding to high-priority alerts, while contributing to automation and agentic capabilities to scale IR across our platforms. You will operate in a distributed 24x7 environment, triage events, and mentor junior responders.