Onsite Senior Incident Response Engineer

Primetime; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Databricks is seeking a Staff Security Engineer in Incident Response to join a global, on-call IR team. You will conduct security analysis, forensics, and respond to high-priority alerts while helping to scale capabilities with agentic platforms.

You will lead incident response efforts, develop automation, and mentor peers, enabling faster containment and improved security posture across Databricks’ security program.

Qualifications

• Bachelor's degree and 7+ years of IR experience or Master's degree with 5+ years in IR.
• Cloud security expertise in AWS, GCP or Azure; proficiency in others.
• Experience with AI/LLM and agentic capabilities in security settings.

Responsibilities

• Respond to security incidents as part of a 24x7 operations and on-call schedule.
• Triage and respond to security events and alerts to contain incidents quickly.
• Perform analysis and forensics across data sources to determine timeline and impact of events.
• Provide technical leadership and influence team direction in IR.
• Develop solutions leveraging AI and agentic platforms to scale incident response.
• Communicate decisions through design docs and tech talks; mentor junior responders.

Skills

Incident Response

Cloud security

AI/LLM

Scripting

Education

Bachelor's degree

Master's degree

Tools

SIEM

SOAR

Job description

Databricks is seeking a Staff Security Engineer in Incident Response to join a global, on-call IR team. You will conduct security analysis, forensics, and respond to high-priority alerts while helping to scale capabilities with agentic platforms.

You will lead incident response efforts, develop automation, and mentor peers, enabling faster containment and improved security posture across Databricks’ security program.