Sr. Databricks Security Engineer

Axos Business Center, Corp; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Axos Business Center, Corp is seeking a Senior Databricks Security Engineer to lead security for its Azure/AWS Databricks platform. You will design, implement, and govern security controls across Unity Catalog, workspace configurations, and cluster policies while ensuring data confidentiality and regulatory compliance for financial analytics and ML workloads.

The role requires 5+ years in information security with 3+ years in big data or cloud data platforms, plus hands-on Databricks

Qualifications

• 5+ years in information security with 3+ years in big data or cloud data platform security.
• Hands-on Databricks security administration and Unity Catalog configuration.
• Experience securing Databricks on Azure or AWS with network and secrets management.
• Strong knowledge of data governance, PCI-DSS, SOX, GDPR, CCPA.

Responsibilities

• Design, implement, and govern Databricks security architecture and policies.
• Lead Unity Catalog rollout, access controls, data lineage, and ABAC.
• Manage workspace security, network config, secrets, and init script reviews.
• Implement and monitor audit logging for compliance and threat detection.
• Oversee authentication integration and service principal lifecycle.
• Collaborate with data/ML teams to embed security in pipelines and notebooks.
• Drive data classification and Delta Lake encryption, masking, and DLP policies.
• Align Databricks workloads with regulatory standards and security baselines.
• Develop configuration-as-code templates and security hardening guides.
• Assess ML models/pipelines for adversarial risks and data exfiltration threats.

Skills

Security architecture

Databricks security

Unity Catalog

Cloud data security

PySpark/Python/SQL

Data governance

PCI-DSS/GDPR/SC guidelines

Tools

Databricks

Unity Catalog

Apache Atlas/Ranger

Azure AD/Azure Gen2

AWS IAM/VPC

Job description

Overview

Axos Business Center, Corp seeks a Senior Databricks Security Engineer to spearhead the security of its enterprise data and AI platform. The role focuses on protecting critical financial analytics, risk modeling, and machine learning workloads within Databricks on Azure and/or AWS, ensuring data confidentiality, integrity, and regulatory compliance across the Lakehouse platform.

Responsibilities

• Design, implement, and govern the Databricks security architecture including Unity Catalog, workspace configurations, and cluster policies.
• Lead Unity Catalog implementation: fine‑grained access control, data lineage, row/column‑level security, and attribute‑based access control (ABAC).
• Manage Databricks workspace security: network configurations (Private Link, VPC peering, IP allowlisting), secrets management, and init script security review.
• Implement and monitor Databricks audit logging for threat detection and compliance reporting.
• Govern service principal and PAT lifecycle management; enforce OAuth2.0 / OIDC authentication integration.
• Collaborate with data engineering and ML teams to embed security reviews into data pipeline and notebook development workflows.
• Lead data classification and protection initiatives within the Lakehouse – implement Delta Lake encryption, masking, and DLP policies.
• Drive compliance alignment for Databricks workloads.
• Develop and maintain Databricks security baselines, hardening standards, and configuration‑as‑code templates.
• Perform security assessments of ML models and pipelines for adversarial risks, data poisoning, and model exfiltration threats.
• Act as the internal SME for Databricks security, advising on platform upgrades, feature adoption, and emerging risks.
• Support third‑party and internal security audits; produce evidence and remediate findings related to data platform controls.

Required Qualifications

• 5+ years of information security experience, with 3+ years focused on big data or cloud data platform security.
• Hands‑on expertise with Databricks platform administration and security: Unity Catalog, cluster policies, workspace management, and secrets.
• Experience securing Databricks on Azure (ADLSGen2, AzureAD integration, VNet injection) or AWS (S3, IAM roles, VPC).
• Proficiency in PySpark, Python, and SQL for data security tooling, audit analysis, and access control implementation.
• Strong understanding of data governance frameworks and their application in regulated financial services environments.
• Knowledge of relevant compliance standards such as PCI‑DSS, SOX, GDPR, CCPA, and BCBS239.
• Familiarity with MLOps security concepts and risks in model lifecycle management.

Preferred Qualifications

• Databricks Certified Associate Developer or Platform Administrator certification.
• Databricks Certified Data Engineer – Professional.
• CISSP, CISM, CCSP, or CDPSE certification.
• Experience with Delta Sharing security and cross‑organizational data sharing governance.
• Exposure to model risk management (SR11‑7 / SS1/23) and AI/ML governance frameworks.
• Experience with Apache Atlas, Apache Ranger, or comparable open‑source data governance tools.

Job Functions and Work Environment

While performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

Equal Employment Opportunity Statement

Axos is an Equal Opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.