Staff Security Engineer, Incident Response

Stack

Responsibilities

• ▹Respond to incidents as part of a distributed 24x7 operations and on-call schedule
• ▹Triage and respond to security events and alerts, ensuring quick and effective containment
• ▹Conduct analysis and forensics across data sources to determine the timeline and impact of security events
• ▹Provide technical leadership and influence team direction
• ▹Develop solutions, including with AI and agentic platforms, to deliver autonomous capabilities and scale the team's impact
• ▹Communicate technical decisions through design docs and tech talks, and mentor junior responders via guidance, design reviews and code reviews

Requirements

• ▹Bachelor's degree AND 7+ years of incident response experience, OR Master's degree AND 5+ years
• ▹Cloud security expertise in at least one of AWS, GCP or Azure, and proficiency in the others
• ▹Proficiency in AI/LLM and agentic capabilities
• ▹Broad security subject matter expertise
• ▹Expertise in a few core IR skills (DFIR, reverse engineering, traditional network security, storage and access security, sandboxing, compute security, etc.)
• ▹Experience with enterprise security and SaaS applications
• ▹Working knowledge of a SIEM and SOAR
• ▹Experience building incident response tooling, scripting skills and experience with AI coding tools

Nice to have

• ▹Experience building and operating agentic systems in a security setting

Soft skills

About the company

Databricks is the Data and AI company; more than 20,000 organizations worldwide use its Data + AI Platform. It is headquartered in San Francisco with 30+ offices around the globe.