Database Security Engineer

AXOS BUSINESS CENTER CORP.; Taguig; On-site; PHP 2,009,000 - 2,902,000; Full time

Job summary

Axos Business Center is seeking a Senior Databricks Security Engineer to secure our enterprise data and AI platform. You will design a comprehensive security framework for Databricks on Azure and/or AWS, ensuring data confidentiality, integrity, and regulatory compliance across the Lakehouse.

You will lead Unity Catalog implementation, manage workspace security, and drive data protection initiatives with Delta Lake encryption and DLP policies.

Qualifications

• 5+ years of information security experience with 3+ years in big data or cloud data platform security.
• Experience securing Databricks on Azure or AWS.
• Hands-on Databricks platform administration and security.

Responsibilities

• Design, implement, and govern the Databricks security architecture including Unity Catalog, workspace configurations, and cluster policies.
• Lead Unity Catalog implementation: fine-grained access control, data lineage, row/column-level security, and ABAC.
• Manage Databricks workspace security: network configurations, secrets management, and init scripts security review.
• Implement and monitor Databricks audit logging for threat detection and compliance reporting.
• Govern service principal and PAT lifecycle management; enforce OAuth 2.0 / OIDC authentication integration.
• Collaborate with data engineering and ML teams to embed security reviews into data pipelines and notebook development workflows.
• Lead data classification and protection initiatives within the Lakehouse — Delta Lake encryption, masking, and DLP policies.
• Drive compliance alignment for Databricks workloads.
• Develop and maintain Databricks security baselines, hardening standards, and configuration-as-code templates.
• Perform security assessments of ML models and pipelines for adversarial risks and model exfiltration threats.
• Act as the internal SME for Databricks security, advising on upgrades and emerging risks.
• Support audits; produce evidence and remediate findings related to data platform controls.

Skills

Databricks security

PySpark/Python/SQL

Data governance frameworks

Cloud security (Azure/AWS)

MLOps security

Tools

Unity Catalog

Secrets management

Delta Lake security

Job description

Imagine a world where banking is not just a transaction but a transformative experience. Welcome to Axos Business Center! We’re on a mission to redefine the financial landscape with innovation, creativity, and customer-centric solutions at the core of everything we do. #Banking Evolved.

Ready to dive into a new chapter in your career journey and make your mark this year? We need visionary minds like yours! Join our team and become part of a dynamic force that’s reshaping how people interact with their finances.

Your next big opportunity is just a click away!

As a Senior Databricks Security Engineer, you will be at the forefront of securing our enterprise data and AI platform. Our Databricks environment underpins critical financial analytics, risk modeling, and machine learning workloads. You will be responsible for designing and implementing a comprehensive security framework for Databricks on Azure and/or AWS — ensuring data confidentiality, integrity, and regulatory compliance across all layers of the Lakehouse platform.

Key Responsibilities

• Design, implement, and govern the Databricks security architecture including Unity Catalog, workspace configurations, and cluster policies

• Lead Unity Catalog implementation: fine-grained access control, data lineage, row/column-level security, and attribute-based access control (ABAC)

• Manage Databricks workspace security: network configurations (Private Link, VPC peering, IP allowlisting), secrets management, and init scripts security review

• Implement and monitor Databricks audit logging for threat detection and compliance reporting

• Govern service principal and PAT lifecycle management; enforce OAuth 2.0 / OIDC authentication integration

• Collaborate with data engineering and ML teams to embed security reviews into data pipeline and notebook development workflows

• Lead data classification and protection initiatives within the Lakehouse — implement Delta Lake encryption, masking, and DLP policies

• Drive compliance alignment for Databricks workloads

• Develop and maintain Databricks security baselines, hardening standards, and configuration-as-code templates

• Perform security assessments of ML models and pipelines for adversarial risks, data poisoning, and model exfiltration threats

• Act as the internal SME for Databricks security, advising on platform upgrades, feature adoption, and emerging risks

• Support third-party and internal security audits; produce evidence and remediate findings related to data platform controls

Required Qualifications

• 5+ years of information security experience, with 3+ years focused on big data or cloud data platform security

• Hands-on expertise with Databricks platform administration and security: Unity Catalog, cluster policies, workspace management, secrets

• Experience securing Databricks on Azure (ADLS Gen2, Azure AD integration, VNet injection) or AWS (S3, IAM roles, VPC)

• Proficiency in PySpark, Python, and SQL for data security tooling, audit analysis, and access control implementation

• Strong understanding of data governance frameworks and their application in regulated financial services environments

• Knowledge of relevant compliance standards such as PCI-DSS, SOX, GDPR, CCPA, BCBS 239

• Familiarity with MLOps security concepts and risks in model lifecycle management

Preferred Qualifications

• Databricks Certified Associate Developer or Platform Administrator certification

• Databricks Certified Data Engineer — Professional

• CISSP, CISM, CCSP, or CDPSE certification

• Experience with Delta Sharing security and cross-organizational data sharing governance

• Exposure to model risk management (SR 11-7 / SS1/23) and AI/ML governance frameworks

• Experience with Apache Atlas, Apache Ranger, or comparable open-source data governance tools