Senior Incident Response Engineer — AI-Driven IR Leader (Remote)

Databricks Inc.; California; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Databricks is seeking a Staff Security Engineer, Incident Response in California to join a distributed 24x7 IR team. You will conduct security analysis, forensics, and respond to high-priority alerts while helping scale automation on our security platform.

You will lead technical decisions, mentor junior responders, and contribute to agentic capabilities using AI technologies. A current US government clearance eligibility is required; Top Secret preferred.

Qualifications

• Active US Government Secret eligibility; Top Secret preferred.
• Bachelor's Degree AND 7+ years in Incident Response, or Master's Degree AND 5+ years.
• Cloud security expertise across AWS, GCP or Azure, with proficiency in others.
• Proficiency in AI/LLM and agentic capabilities for security use cases.
• Experience with IR tooling, scripting, and SIEM/SOAR environments.

Responsibilities

• Respond to incidents as part of a 24x7 on-call IR rotation.
• Triage security events and perform containment and analysis.
• Conduct forensics across diverse data sources to map timelines and impact.
• Provide technical leadership and influence team direction.
• Develop solutions using AI/agentic platforms to scale IR capabilities.
• Communicate decisions via design docs and mentor junior responders.

Skills

Incident Response

Forensics

Cloud security

AI/LLM

Agentic capabilities

SIEM/SOAR

Security leadership

Scripting

Education

Bachelor's degree

Master's degree

Tools

Cloud platforms (AWS/GCP/Azure)

AI tooling

Job description

Databricks is seeking a Staff Security Engineer, Incident Response in California to join a distributed 24x7 IR team. You will conduct security analysis, forensics, and respond to high-priority alerts while helping scale automation on our security platform.

You will lead technical decisions, mentor junior responders, and contribute to agentic capabilities using AI technologies. A current US government clearance eligibility is required; Top Secret preferred.