Sr Security Engineer, Incident Response

Databricks

113d

About The Position

The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing 'Security for Databricks on Databricks', using our own platform to create near-real-time log analytics, alerting and forensics. You will be an individual contributor on the globally distributed Security Incident Response Team (SIRT) at Databricks, reporting to the Manager, Incident Response. You will be responsible for supporting incidents, investigations, and security initiatives from postmortems in the AMER timezone. In order to comply with U.S. Government information security and federal contractor regulations, including Department of Defense Cloud Computing Security Requirements for Impact Level 6 Cloud Service Provider personnel, and facilitate compliance with other regulations such as FedRAMP High baseline, and requirements of certain federal contracts, this role is open to United States citizens on United States Soil only.

Requirements

• Bachelor's Degree OR Master's Degree AND 5+ years of experience in Incident Response work
• Working knowledge of at least one of AWS, GCP, or Azure
• Working knowledge of SQL for investigation analysis, bash scripting, network fundamentals, python and code-versioning like Git
• Fully understands the network and system elements of the enterprise environment
• Willingness to support on-call shifts and learn on the job
• Strong written and oral communication skills

Responsibilities

• Produce relevant code artifacts (designs, processes, automation, implementation) independently or with minimal guidance
• Provide on-call support, including systems within your general area where you may not be trained or familiar
• Solicit and receive feedback from peers and other teams, and are eager to find ways to continuously improve
• Triage and respond to security events and alerts by understanding existing logs, correlating from multiple sources during an investigation
• Respond to incidents as part of a distributed 24x7 operations and on-call schedule
• Build automation to improve security incident response and alerts triage

Benefits

• Comprehensive benefits and perks that meet the needs of all employees

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees