Staff Security Engineer, Incident Response

Stack

Responsibilities

• ▹Respond to incidents as part of a distributed 24x7 on-call schedule
• ▹Triage and respond to security events and alerts for quick containment
• ▹Conduct analysis and forensics across data sources to determine the timeline and impact of security events
• ▹Provide technical leadership and influence team direction
• ▹Develop solutions, including with AI and agentic platforms, to deliver autonomous capabilities
• ▹Communicate technical decisions through design docs and tech talks, and mentor junior responders

Requirements

• ▹Bachelor's degree and 7+ years of incident response experience, or Master's degree and 5+ years
• ▹Cloud security expertise in at least one of AWS, GCP or Azure, and proficiency in the others
• ▹Proficiency in AI/LLM and agentic capabilities
• ▹Broad security subject matter expertise
• ▹Expertise in a few core IR skills (DFIR, reverse engineering, network security, storage and access security, sandboxing, compute security)
• ▹Experience with enterprise security and SaaS applications
• ▹Working knowledge of a SIEM and SOAR
• ▹Experience building incident response tooling, scripting skills and experience with AI coding tools

Nice to have

• ▹Experience building and operating agentic systems in a security setting

Soft skills

About the company

Databricks is the Data and AI company: over 20,000 organisations use its Data + AI Platform. Headquartered in San Francisco with 30+ offices worldwide.