Staff Security Engineer, Incident Response

About the role

The Incident Response team is responsible for protecting customers, employees, and enterprise data by responding to security threats and investigations. As an individual contributor, you will conduct security analysis and forensics, respond to high-priority alerts, and contribute to the development of automation and agentic capabilities to scale the team's impact.

Responsibilities

• Respond to incidents as part of a distributed 24x7 operations and on-call schedule.
• Triage and respond to security events and alerts to ensure effective containment.
• Conduct analysis and forensics across data sources to determine the timeline and impact of security events.
• Provide technical leadership and influence team direction.
• Develop solutions leveraging AI and agentic platforms to deliver autonomous capabilities.
• Communicate technical decisions through design docs and tech talks, and mentor junior responders.

Required skills

• Incident Response
• Cloud security
• AWS
• GCP
• Azure
• AI
• LLM
• DFIR
• Reverse Engineering
• Network Security
• SIEM
• SOAR
• Scripting

Nice to have

• Building agentic systems

Qualifications

• Bachelor's Degree with 7+ years experience in Incident Response
• Master's Degree with 5+ years experience in Incident Response

About the Company

Databricks is the Data and AI company. More than 20,000 organizations worldwide rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents.