Sr. Staff Security Software Engineer - Agentic Security Engineering

Databricks; California; Sur place; USD 194 000 - 314 000; Plein temps

Résumé du poste

Databricks is seeking a Senior Staff Security Software Engineer to serve as the technical authority for a shared Security AI platform. You will define platform architecture, standards, and multi-year direction to enable governance, isolation, and safe operation of AI-enabled security personas at scale.

You will drive cross-functional collaboration across Security Operations, Product Security, Governance and Risk, and other teams, shaping patterns, tooling, and safe integration with Databricks

Qualifications

• 10+ years of software engineering, security platform architecture, or related systems security.
• Expertise in Python and cloud-native architectures with low-latency security infrastructure.
• Ability to align multiple leadership teams on complex technical strategies.

Responsabilités

• Define and evolve the architecture for the shared Security AI platform and its paved road for governed agentic workflows.
• Establish reusable patterns for agent identity, least-privilege access, sandboxing, egress control, secret isolation, policy enforcement, auditability, and rollback.
• Set engineering standards for reliability, observability, evaluation, incident response, cost instrumentation, and safe production deployment.
• Make high-leverage build, buy, and adopt decisions that keep the platform focused on security-specific capabilities while using Databricks primitives where needed.
• Design the platform to support secure multi-agent workflows, tool registries, policy-aware orchestration, and agent-to-agent collaboration.
• Lead the design and development of production-grade platform capabilities that enable security personas to operate reliably across a growing AI and security surface.
• Define how the platform measures successful runs, latency, failure rates, rollback readiness, safety, governance coverage, trust, autonomy, and business value.
• Establish qualification and maturity mechanisms that determine what a security persona may do, what controls it requires, and how it earns additional autonomy.
• Drive technical solutions for high-risk workflows, including offensive security personas, untrusted inputs, sensitive data, production access, and automated tool execution.
• Improve the velocity of safe AI development without compromising security, governance, or operational reliability.
• Mentor engineers on distributed systems, platform architecture, AI security engineering, agentic threat modeling, and technical leadership.
• Lead high-rigor design reviews and raise the bar for reliability, operability, security, and maintainability.
• Help establish a culture of measurable outcomes, disciplined evaluation, safe experimentation, and continuous improvement.
• Influence technical direction beyond the immediate team through clear written proposals, architecture reviews, and cross-functional execution.

Connaissances

Python

Kubernetes

Cloud architecture

Security engineering

Multi-organization leadership

Outils

Distributed systems

AI/ML security

Threat modeling

Description du poste

RDQ327R179

While candidates in the listed location(s) are encouraged for this role, candidates in other (US) locations will be considered.

About The Team

The Agentic Security Engineering team is a horizontal, shared services engineering team that enables every Databricks security function AI-native. We enable building the AI agents, \"personas,\" and own the shared platform that security teams across the org (Detection & Response, Threat Intelligence, Vulnerability & Product Security, Red Team, GRC, and Continuous Monitoring) build on to operate at machine speed, safely and reliably.

We leverage AI to transform how security is done.

The Role

As a Senior Staff Security Software Engineer on the Agentic Security Engineering team, you will be a senior technical authority and architect for Databricks’ shared Security AI platform.

You will define the platform architecture, technical standards, and multi-year engineering direction that allow security teams to build, deploy, and operate governed AI personas safely at scale. Your work will span secure agent identity, isolation and sandboxing, policy enforcement, auditability, observability, evaluation, orchestration, and reliable integration with Databricks and security infrastructure.

You will operate across organizational boundaries, aligning engineering and security leaders on platform architecture, driving adoption of common patterns, and resolving complex technical problems that affect multiple security functions. You will influence the quality, safety, reliability, and velocity of the broader Security AI ecosystem without owning the domain logic or business outcomes of every individual persona.

The Impact You Will Have

Shared Security AI Platform Architecture

• Define and evolve the architecture for the shared Security AI platform and its paved road for governed agentic workflows.
• Establish reusable patterns for agent identity, least-privilege access, sandboxing, egress control, secret isolation, policy enforcement, auditability, and rollback.
• Set engineering standards for reliability, observability, evaluation, incident response, cost instrumentation, and safe production deployment.
• Make high-leverage build, buy, and adopt decisions that keep the platform focused on security-specific capabilities while using Databricks platform primitives wherever they meet the need.
• Design the platform to support secure multi-agent workflows, tool registries, policy-aware orchestration, and agent-to-agent collaboration.

Reliable and Safe Agentic Systems at Scale

• Lead the design and development of production-grade platform capabilities that enable security personas to operate reliably across a growing AI and security surface.
• Define how the platform measures successful runs, latency, failure rates, rollback readiness, safety, governance coverage, trust, autonomy, and business value.
• Establish qualification and maturity mechanisms that determine what a security persona may do, what controls it requires, and how it earns additional autonomy.
• Drive technical solutions for high-risk workflows, including offensive security personas, untrusted inputs, sensitive data, production access, and automated tool execution.
• Improve the velocity of safe AI development without compromising security, governance, or operational reliability.

Cross-Organizational Technical Leadership

• Serve as a technical authority for the shared Security AI platform across Security Operations, Product Security, Governance and Risk, Compliance and Assurance, Enterprise Security, and other partner functions.
• Align engineering and security leaders on platform direction, architectural tradeoffs, adoption priorities, and standards for safe agentic systems.
• Partner with AI Champions and domain teams to turn recurring cross-functional needs into reusable platform capabilities.
• Represent the platform in architecture reviews and technical decisions involving agent identity, isolation, policy, observability, evaluation, orchestration, and secure integration.
• Drive adoption of common platform patterns and retire duplicated or inconsistent implementations across security teams.

Mentorship and Team Capability

• Mentor engineers on distributed systems, platform architecture, AI security engineering, agentic threat modeling, and technical leadership.
• Lead high-rigor design reviews and raise the bar for reliability, operability, security, and maintainability.
• Help establish a culture of measurable outcomes, disciplined evaluation, safe experimentation, and continuous improvement.
• Influence technical direction beyond the immediate team through clear written proposals, architecture reviews, and cross-functional execution.

What We Look For

• 10+ years of progressive experience in software engineering, security platform architecture, or systems security, with a proven track record of operating at an L7/Senior Staff level at a major cloud, platform, or high-growth tech company.
• Production Systems Engineering: Exceptional fluency in Python and modern cloud-native systems architecture (Kubernetes, distributed streaming/storage, high-throughput microservices) with experience delivering fault-tolerant, low-latency security infrastructure.
• Multi-Org Architectural Execution: Demonstrated ability to align multiple VP/Engineering Director-level organizations on complex technical strategies and successfully ship multi-quarter architectural transformations.
• Deep practical expertise in AI/ML security, agentic system trust boundaries, prompt injection and tool-use risks, adversarial testing, identity and authorization, data protection, and secure deployment of AI-enabled systems.
• Experience designing platform guardrails for sensitive workflows involving untrusted input, privileged tools, secrets, production systems, or confidential data.
• Strong technical communication skills, including the ability to explain complex platform, security, and reliability tradeoffs to engineers, security leaders, and senior executives.
• A track record of raising the technical bar through design reviews, mentorship, written architecture proposals, and influence beyond formal reporting lines.

Nice to Have

• Experience building secure agent platforms, developer platforms, security control planes, or internal infrastructure used by multiple teams.
• Experience with MLOps, AI serving infrastructure, security data platforms, detection systems, or large-scale security automation.
• Published research, patents, or recognized contributions in adversarial ML, AI safety frameworks, or open-source security platforms.
• Hands-on experience building or securing large-scale LLM training pipelines, vector databases, or AI agent runtime environments.
• Deep understanding of emerging global AI regulatory technical requirements (EU AI Act, NIST AI RMF) and how to encode them into engineering primitives.

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected base salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipated utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.

Zone 1 Pay Range

$228,600—$314,250 USD

Zone 2 Pay Range

$205,700—$282,800 USD

Zone 3 Pay Range

$194,200—$267,100 USD

Zone 4 Pay Range

$182,900—$251,450 USD

About Databricks

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.

Benefits

At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.

Our Commitment to Diversity and Inclusion

At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance

If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.