Staff Security Engineer, Incident Response

Databricks is a data and AI company seeking a Staff Security Engineer, Incident Response to join its security Incident Response team. The role conducts security analysis and forensics, responds to high-priority alerts and incidents, develops AI-enabled automation, and provides technical leadership and mentorship.

Responsibilities:

• You will respond to incidents as part of a distributed 24x7 operations and on-call schedule
• You will triage and respond to security events and alerts, ensuring quick and effective containment
• You will conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events
• You will provide technical leadership and influence team direction
• You will develop solutions, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team
• You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews

Requirements:

• Must have an active or current US GOV Secret clearance eligibility
• Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience
• Cloud security expertise in at least 1 of AWS, GCP or Azure, and proficiency in the others
• Proficiency in AI/LLM and agentic capabilities
• Broad security subject matter expertise
• Expertise in a few core IR skills (DFIR , Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, etc.)
• Experience with Enterprise Security and SaaS applications
• Working knowledge of a SIEM and SOAR
• Experience building Incident Response Tooling, scripting language skills and experience with AI coding tools
• Top Secret
• Prefer experience with building and operating agentic systems in a security setting