Senior Incident IR Engineer - AI-Driven, 24x7 On-Call

Cybersecurity Jobs; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Databricks is hiring a Staff Security Engineer, Incident Response to join the Security Incident Response team. This senior role focuses on hands‑on security analysis and forensics with ownership of incident response operations across a distributed 24x7 on‑call schedule.

The candidate will triage alerts, drive containment, and shape how the team scales IR capabilities using automation, AI, and agentic systems. Mentorship and technical leadership are integral to the role.

Qualifications

• Active or current US GOV Secret clearance eligibility; Top Secret preferred.
• Bachelor’s Degree and 7+ years in Incident Response, or Master’s Degree and 5+ years.
• Cloud security expertise in AWS, GCP, or Azure; proficiency in the others.
• Proficiency in AI/LLM and agentic capabilities; experience building agentic systems in a security context.
• Broad security subject matter expertise.
• Expertise in core IR areas such as DFIR, Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security.
• Experience with Enterprise Security and SaaS applications.
• Working knowledge of SIEM and SOAR.
• Experience building Incident Response Tooling, scripting languages, and AI coding tools.

Responsibilities

• Triage high‑priority alerts and drive containment.
• Perform analysis and forensics to establish timeline and impact.
• Provide technical leadership and influence team direction.
• Develop solutions leveraging AI and agentic platforms to deliver autonomous capabilities.
• Communicate technical decisions via design docs and tech talks.
• Mentor junior security responders through security guidance, design reviews, and code reviews.

Skills

Security Incident Response

AI/LLM

Agentic platforms

Cloud security

Leadership

Education

Bachelor’s Degree

Master’s Degree

Tools

SIEM

SOAR

Scripting languages

AI coding tools

Job description

Databricks is hiring a Staff Security Engineer, Incident Response to join the Security Incident Response team. This senior role focuses on hands‑on security analysis and forensics with ownership of incident response operations across a distributed 24x7 on‑call schedule.

The candidate will triage alerts, drive containment, and shape how the team scales IR capabilities using automation, AI, and agentic systems. Mentorship and technical leadership are integral to the role.