Sr. Staff Security Software Engineer - Agentic Security Engineering

Databricks Inc.; California; Hybrid; USD 194,000 - 314,000; Full time

Job summary

Databricks is seeking a Sr. Staff Security Software Engineer for the Agentic Security Engineering team.

You will serve as a senior technical authority and architect for a shared Security AI platform, defining architecture, standards, and multi-year direction to enable governed agentic workflows, identity, isolation, policy, and auditability at scale. You will partner across Security Ops, Product Security, and Enterprise Security to drive adoption of common platform patterns, while solving

Qualifications

• 10+ years of progressive software/ security platform experience.
• Proven track record as a senior staff or L7 level engineer at a major cloud or tech company.
• Fluency in Python and cloud-native systems architecture.
• Experience aligning multiple orgs on architectural direction and platform standards.
• Deep expertise in AI/ML security, identity, access, data protection, and secure deployment.

Responsibilities

• Define the shared Security AI platform architecture and multi-year engineering direction.
• Lead the design of agent identity, sandboxing, policy enforcement, auditability, and observability.
• Drive cross-organizational collaboration across Security Operations, Governance, and Product Security.
• Mentor engineers on distributed systems, design reviews, and security engineering best practices.
• Ensure safe, scalable integration with Databricks infrastructure and security controls.

Skills

Python

Cloud-native architecture

Kubernetes

Security engineering

Platform architecture

Cross-organizational leadership

Job description

Skip to main content Overview Culture Benefits Diversity Engineering Research Students & new grads Back to search results

Sr. Staff Security Software Engineer - Agentic Security Engineering

Remote - California

RDQ327R179

While candidates in the listed location(s) are encouraged for this role, candidates in other (US) locations will be considered.

About the Team

The Agentic Security Engineering team is a horizontal, shared services engineering team that enables every Databricks security function AI-native. We enable building the AI agents, "personas," and own the shared platform that security teams across the org (Detection & Response, Threat Intelligence, Vulnerability & Product Security, Red Team, GRC, and Continuous Monitoring) build on to operate at machine speed, safely and reliably.

We leverage AI to transform how security is done.

The Role

As a Senior Staff Security Software Engineer on the Agentic Security Engineering team, you will be a senior technical authority and architect for Databricks’ shared Security AI platform.

You will define the platform architecture, technical standards, and multi-year engineering direction that allow security teams to build, deploy, and operate governed AI personas safely at scale. Your work will span secure agent identity, isolation and sandboxing, policy enforcement, auditability, observability, evaluation, orchestration, and reliable integration with Databricks and security infrastructure.

You will operate across organizational boundaries, aligning engineering and security leaders on platform architecture, driving adoption of common patterns, and resolving complex technical problems that affect multiple security functions. You will influence the quality, safety, reliability, and velocity of the broader Security AI ecosystem without owning the domain logic or business outcomes of every individual persona.

The Impact You Will Have

Shared Security AI Platform Architecture

• Define and evolve the architecture for the shared Security AI platform and its paved road for governed agentic workflows.
• Establish reusable patterns for agent identity, least-privilege access, sandboxing, egress control, secret isolation, policy enforcement, auditability, and rollback.
• Set engineering standards for reliability, observability, evaluation, incident response, cost instrumentation, and safe production deployment.
• Make high-leverage build, buy, and adopt decisions that keep the platform focused on security-specific capabilities while using Databricks platform primitives wherever they meet the need.
• Design the platform to support secure multi-agent workflows, tool registries, policy‑aware orchestration, and agent‑to‑agent collaboration.

Reliable and Safe Agentic Systems at Scale

• Lead the design and development of production‑grade platform capabilities that enable security personas to operate reliably across a growing AI and security surface.
• Define how the platform measures successful runs, latency, failure rates, rollback readiness, safety, governance coverage, trust, autonomy, and business value.
• Establish qualification and maturity mechanisms that determine what a security persona may do, what controls it requires, and how it earns additional autonomy.
• Drive technical solutions for high‑risk workflows, including offensive security personas, untrusted inputs, sensitive data, production access, and automated tool execution.
• Improve the velocity of safe AI development without compromising security, governance, or operational reliability.

Cross‑Organizational Technical Leadership

• Serve as a technical authority for the shared Security AI platform across Security Operations, Product Security, Governance and Risk, Compliance and Assurance, Enterprise Security, and other partner functions.
• Align engineering and security leaders on platform direction, architectural tradeoffs, adoption priorities, and standards for safe agentic systems.
• Partner with AI Champions and domain teams to turn recurring cross‑functional needs into reusable platform capabilities.
• Represent the platform in architecture reviews and technical decisions involving agent identity, isolation, policy, observability, evaluation, orchestration, and secure integration.
• Drive adoption of common platform patterns and retire duplicated or inconsistent implementations across security teams.

Mentorship and Team Capability

• Mentor engineers on distributed systems, platform architecture, AI security engineering, agentic threat modeling, and technical leadership.
• Lead high‑rigor design reviews and raise the bar for reliability, operability, security, and maintainability.
• Help establish a culture of measurable outcomes, disciplined evaluation, safe experimentation, and continuous improvement.
• Influence technical direction beyond the immediate team through clear written proposals, architecture reviews, and cross‑functional execution.

What We Look For

• 10+ years of progressive experience in software engineering, security platform architecture, or systems security, with a proven track record of operating at an L7/Senior Staff level at a major cloud, platform, or high‑growth tech company.
• Production Systems Engineering: Exceptional fluency in Python and modern cloud-native systems architecture (Kubernetes, distributed streaming/storage, high-throughput microservices) with experience delivering fault‑tolerant, low‑latency security infrastructure.
• Multi‑Org Architectural Execution: Demonstrated ability to align multiple VP/Engineering Director‑level organizations on complex technical strategies and successfully ship multi‑quarter architectural transformations.
• Deep practical expertise in AI/ML security, agentic system trust boundaries, prompt injection and tool‑use risks, adversarial testing, identity and authorization, data protection, and secure deployment of AI‑enabled systems.
• Experience designing platform guardrails for sensitive workflows involving untrusted input, privileged tools, secrets, production systems, or confidential data.
• Strong technical communication skills, including the ability to explain complex platform, security, and reliability tradeoffs to engineers, security leaders, and senior executives.
• A track record of raising the technical bar through design reviews, mentorship, written architecture proposals, and influence beyond formal reporting lines.

Nice to Have

• Experience building secure agent platforms, developer platforms, security control planes, or internal infrastructure used by multiple teams.
• Experience with MLOps, AI serving infrastructure, security data platforms, detection systems, or large‑scale security automation.
• Published research, patents, or recognized contributions in adversarial ML, AI safety frameworks, or open‑source security platforms.
• Hands‑on experience building or securing large‑scale LLM training pipelines, vector databases, or AI agent runtime environments.
• Deep understanding of emerging global AI regulatory technical requirements (EU AI Act, NIST AI RMF) and how to encode them into engineering primitives.

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected base salary range for non‑commissionable roles or on‑target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job‑related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipated utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here .

Zone 1 Pay Range $228,600 — $314,250 USD

Zone 2 Pay Range $205,700 — $282,800 USD

Zone 3 Pay Range $194,200 — $267,100 USD

Zone 4 Pay Range $182,900 — $251,450 USD

About Databricks

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn , X , YouTube , and Instagram .

Benefits

At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here .

Our Commitment to Diversity and Inclusion

At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio‑economic status, veteran status, and other protected characteristics.

Compliance

If access to export‑controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Databricks’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

Gender Select... Are you Hispanic/Latino? Select... Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status Select... Applicant Privacy Notice