Sr. Security Detection Engineer

While candidates in the listed locations are encouraged for this role, we are open to remote candidates in other locations.

RDQ125R45

The Detection & Response team's mission is to protect Databricks products, cloud infrastructure, endpoints and employees from security threats and modern attacks. We are a team of expert engineers combining log analysis expertise, cybersecurity skills and software development to build a mature and durable detection platform. We embrace “Detection-as-Code” model by doing “Security for Databricks on Databricks”, using our own platform to build alerts and detections.

You are passionate about ML-based intrusion detection. You have experience building ML at enterprise scale, and are comfortable implementing models from conception to production. You also love to learn continuously about novel attacks, dig into the inner details of cyber-security incidents, discover new log sources and undocumented schemas to detect suspicious activities, and think about attacks using graphs.

You will be an individual contributor on the Security Detection team at Databricks, reporting to the Sr Manager of Detection Engineering.

The impact you will have:

• Dive into new or unknown log sources to understand events, schemas, raw data and build a detection strategy based on threats and adversaries knowledge
• Partner with our data team to build the most efficient and useful log ingestion pipelines
• Engineer detections on Spark in Python using Databricks (with good design, clean code, unit testing, full documentation).
• Fuse numerous log types to implement anomaly- and ML-based intrusion detection on the Databricks platform.
• Partner with Incident Response to provide rich logs, hunting playbooks and relevant alerts with full context, with near-zero false positives
• Present at security/engineering conferences novel detection work and ideas

What we look for:

• 5+ years of software engineering experience
• 3+ years of Security-related engineering (Detection Engineering preferred)
• Proficient in one major cloud, broad experience in at least one other major cloud (AWS, Azure or GCP)
• Knowledge across two or more Security SME areas: Network security, Host/Disk analysis, Application/Log analysis, Memory/Malware analysis, Endpoint security
• Experience with Python, Git/GitHub, and CI/CD automation.
• Experience with applying machine learning (ML) to security problems.
• Individuals who love to learn, execute fast, take feedback well, and give feedback in an environment of mutual respect and aid.
• Communicates effectively with internal and external stakeholders; communicates recommendations and decisions through appropriate collateral (e.g., design docs, tech talks, etc.

Benefits

• Comprehensive health coverage including medical, dental, and vision
• 401(k) Plan
• Equity awards
• Flexible time off
• Paid parental leave
• Family Planning
• Fitness reimbursement
• Annual personal development fund
• Work headphones reimbursement
• Employee Assistance Program (EAP)
• Business travel accident insurance
• Mental wellness resources

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents base salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks utilizes the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.

About Databricks

Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook.

Our Commitment to Diversity and Inclusion

At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance

If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.