Remote Senior Incident Response Engineer — Forensics & Automation

Databricks; Amsterdam; Remote; EUR 120,000 - 180,000; Full time

Job summary

Databricks is seeking a Staff Security Engineer, Incident Response, to join a distributed 24x7 IR team. You will conduct security analysis, forensics and high-priority incident handling, and contribute to AI-driven automation and agentic capabilities.

You will lead technical decisions, mentor juniors, and drive scalable incident response across cloud environments and SaaS applications.

Qualifications

• Bachelor's degree and 7+ years IR experience, or Master's degree with 5+ years.
• Cloud security expertise in AWS, GCP or Azure, and proficiency in the others.
• Proficiency in AI/LLM and agentic security capabilities.
• Broad security subject matter expertise.
• Expertise in IR skills (DFIR, reverse engineering, network and storage security).
• Experience with SIEM and SOAR; tooling and scripting experience.

Responsibilities

• Respond to incidents as part of a 24x7 distributed operations and on-call rotation.
• Triage and respond to security events and alerts with containment focus.
• Perform analytics and forensics across data sources to map timelines and impact.
• Provide technical leadership and influence team direction.
• Develop solutions including AI and agentic capabilities to scale impact.
• Communicate design decisions and mentor junior responders through reviews.

Skills

Incident Response

Cloud security

AI / LLM

IR skills

Scripting

Education

Bachelor's degree

Master's degree

Tools

SIEM

SOAR

AI coding tools

Agentic platforms

Job description

Databricks is seeking a Staff Security Engineer, Incident Response, to join a distributed 24x7 IR team. You will conduct security analysis, forensics and high-priority incident handling, and contribute to AI-driven automation and agentic capabilities.

You will lead technical decisions, mentor juniors, and drive scalable incident response across cloud environments and SaaS applications.