Staff Security Engineer, Incident Response

About the role

The Incident Response team at Databricks protects customers, employees and enterprise data by responding to security threats and investigations. As a Staff Security Engineer you will work as an individual contributor, conducting security analysis, forensics and developing automation to scale response capabilities.

Key responsibilities

• Participate in a 24x7 on‑call rotation to triage and contain high‑priority security alerts.
• Perform deep‑dive forensic analysis across multiple data sources to reconstruct attack timelines.
• Design and implement AI‑driven automation and agentic tools to accelerate incident handling.
• Mentor junior responders through design reviews, code reviews and security guidance.

Required profile

• Bachelor’s degree with 7+ years of incident response experience, or Master’s degree with 5+ years.
• Strong expertise in cloud security on at least one platform (AWS, GCP or Azure) and working knowledge of the others.
• Proven experience with AI/LLM and building agentic systems in a security context.

Required skills

• Cloud platforms: AWS, GCP, Azure.
• AI/LLM integration and agentic automation.
• SIEM and SOAR tools.
• Incident response tooling, scripting (e.g., Python) and AI coding assistants.
• Core IR techniques such as DFIR, reverse engineering and network security.