Drimva

Databricks

Staff Security Engineer, Incident Response

United States +1 · Staff · Full-time · Posted Oct 8, 2026

Location
United States
Amsterdam, Netherlands
Experience
7+ years with a Bachelor's Degree, or 5+ years with a Master's Degree, in Incident Response work.
Education
Bachelor's Degree or Master's Degree.

About the job

Respond to security incidents and investigations, conduct forensic analysis, and build automation and AI-enabled capabilities to scale Databricks’ incident response.

What you'll do

  • Respond to security events and high-priority alerts, including containment, on a distributed 24x7 on-call schedule.
  • Analyze data sources and conduct forensics to determine incident timelines and impact.
  • Provide technical leadership, develop automation and agentic capabilities, and mentor responders through design and code reviews.

What they ask for

  • Active or current eligibility for a US GOV Secret clearance.
  • Bachelor's Degree and 7+ years of Incident Response experience, or Master's Degree and 5+ years.
  • Cloud security expertise in at least one of AWS, GCP or Azure, with proficiency in the others.
  • Proficiency in AI/LLM and agentic capabilities; broad security expertise and experience with incident response tooling, SIEM and SOAR.

Nice to have

  • Top Secret clearance.
  • Experience building and operating agentic systems in a security setting.

Tools

AWS, GCP, Azure, SIEM, SOAR, AI/LLM

AI focus

Develop solutions using AI and agentic platforms to enable autonomous capabilities, expedite incident response, and scale team impact.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 4, 2026 (UTC)