About the company
Databricks is the Data and AI company. More than 20,000 organizations worldwide rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents.
Responsibilities
- Respond to incidents as part of a distributed 24x7 operations and on-call schedule.
- Triage and respond to security events and alerts, ensuring quick and effective containment.
- Conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events.
- Provide technical leadership and influence team direction.
- Develop solutions, including leveraging AI and agentic platforms, to deliver autonomous capabilities.
- Communicate technical decisions through design docs and tech talks, and mentor junior security responders.
Requirements
- Must have an active or current US GOV Secret clearance eligibility; Top Secret preferred.
- Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience.
- Cloud security expertise in at least 1 of AWS, GCP or Azure, and proficiency in the others.
- Proficiency in AI/LLM and agentic capabilities.
- Broad security subject matter expertise.
- Expertise in a few core IR skills (DFIR, Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, etc.).
- Experience with Enterprise Security and SaaS applications.
- Working knowledge of a SIEM and SOAR.
- Experience building Incident Response Tooling, scripting language skills and experience with AI coding tools.