Staff Security Engineer, Incident Response

Cybersecurity Jobs; San Francisco (CA); Sur place; USD 150 000 - 210 000; Plein temps

Résumé du poste

Databricks is hiring a Staff Security Engineer, Incident Response to join the Security Incident Response team. This senior role focuses on hands‑on security analysis and forensics with ownership of incident response operations across a distributed 24x7 on‑call schedule.

The candidate will triage alerts, drive containment, and shape how the team scales IR capabilities using automation, AI, and agentic systems. Mentorship and technical leadership are integral to the role.

Qualifications

• Active or current US GOV Secret clearance eligibility; Top Secret preferred.
• Bachelor’s Degree and 7+ years in Incident Response, or Master’s Degree and 5+ years.
• Cloud security expertise in AWS, GCP, or Azure; proficiency in the others.
• Proficiency in AI/LLM and agentic capabilities; experience building agentic systems in a security context.
• Broad security subject matter expertise.
• Expertise in core IR areas such as DFIR, Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security.
• Experience with Enterprise Security and SaaS applications.
• Working knowledge of SIEM and SOAR.
• Experience building Incident Response Tooling, scripting languages, and AI coding tools.

Responsabilités

• Triage high‑priority alerts and drive containment.
• Perform analysis and forensics to establish timeline and impact.
• Provide technical leadership and influence team direction.
• Develop solutions leveraging AI and agentic platforms to deliver autonomous capabilities.
• Communicate technical decisions via design docs and tech talks.
• Mentor junior security responders through security guidance, design reviews, and code reviews.

Connaissances

Security Incident Response

AI/LLM

Agentic platforms

Cloud security

Leadership

Formation

Bachelor’s Degree

Master’s Degree

Outils

SIEM

SOAR

Scripting languages

AI coding tools

Description du poste

Databricks is hiring a Staff Security Engineer, Incident Response to serve as an individual contributor on its Security Incident Response team. The role centers on hands‑on security analysis and forensics, with ownership of incident response operations across a distributed 24x7 on‑call schedule.

As a senior responder, you will triage high‑priority alerts, drive containment through effective investigation, and help shape how the team builds and scales incident response capabilities using automation, AI, and agentic systems.

Role summary

• Work within Databricks Security Incident Response as part of a distributed 24x7 operations and on‑call schedule.
• Respond to security events and alerts with a focus on rapid triage and effective containment.
• Perform analysis and forensics across multiple data sources to establish timeline and impact of security events.
• Provide technical leadership and influence team direction.
• Develop solutions leveraging AI and agentic platforms to deliver autonomous capabilities, expedite work, and scale team impact.
• Communicate technical decisions via design docs and tech talks.
• Mentor junior security responders through security guidance, design reviews, and code reviews.

Requirements

• Must have an active or current US GOV Secret clearance eligibility; Top Secret preferred.
• Bachelor’s Degree and 7+ years experience in Incident Response, or Master’s Degree and 5+ years experience.
• Cloud security expertise in at least AWS, GCP, or Azure, with proficiency in the others.
• Proficiency in AI/LLM and agentic capabilities; preference for experience building and operating agentic systems in a security context.
• Broad security subject matter expertise.
• Expertise in several core IR areas such as DFIR, Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, and related skills.
• Experience with Enterprise Security and SaaS applications.
• Working knowledge of SIEM and SOAR.
• Experience building Incident Response Tooling, scripting language skills, and experience using AI coding tools.

Technologies

• AWS, GCP, Azure
• AI, LLM, agentic platforms
• SIEM, SOAR
• DFIR, Reverse Engineering, Sandboxing

Location: California (onsite). Experience level: 5+ years. Education: Bachelor’s Degree.