Staff Security Engineer, Incident Response

About the role

The Incident Response team is responsible for protecting customers, employees, and enterprise data by responding to security threats and investigations. As an individual contributor, you will conduct security analysis and forensics, respond to high-priority alerts, and develop automated solutions using AI and agentic platforms. You will also provide technical leadership and mentor junior team members to help scale security incident response operations.

Responsibilities

• Respond to incidents as part of a distributed 24x7 operations and on-call schedule.
• Triage and respond to security events and alerts to ensure effective containment.
• Conduct analysis and forensics across various data sources to determine event timelines and impact.
• Provide technical leadership and influence team direction.
• Develop solutions using AI and agentic platforms to deliver autonomous capabilities.
• Communicate technical decisions through design documentation and presentations.
• Mentor junior security responders through guidance, design reviews, and code reviews.

Required skills

• Incident Response
• Cloud security
• AWS
• GCP
• Azure
• AI
• LLM
• DFIR
• Reverse Engineering
• Network Security
• SIEM
• SOAR
• Scripting

Nice to have

• Agentic systems

Qualifications

• Bachelor's Degree with 7+ years experience in Incident Response
• Master's Degree with 5+ years experience in Incident Response

About the Company

Databricks is the Data and AI company, providing a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. More than 20,000 organizations worldwide rely on the Databricks Data + AI Platform to build and scale data and AI applications, analytics, and agents.