Sr. Security Detection Engineer

Databricks
Remote - Washington
$154.4K-$273.2K a year
Remote
Full-time

While candidates in the listed locations are encouraged for this role, we are open to remote candidates in other locations.

RDQ125R45

The Detection & Response team's mission is to protect Databricks products, cloud infrastructure, endpoints and employees from security threats and modern attacks.

We are a team of expert engineers combining log analysis expertise, cybersecurity skills and software development to build a mature and durable detection platform.

We embrace Detection-as-Code model by doing Security for Databricks on Databricks , using our own platform to build alerts and detections.

You are passionate about ML-based intrusion detection. You have experience building ML at enterprise scale, and are comfortable implementing models from conception to production.

You also love to learn continuously about novel attacks, dig into the inner details of cyber-security incidents, discover new log sources and undocumented schemas to detect suspicious activities, and think about attacks using graphs.

You will be an individual contributor on the Security Detection team at Databricks, reporting to the Sr Manager of Detection Engineering.

The impact you will have :

  • Dive into new or unknown log sources to understand events, schemas, raw data and build a detection strategy based on threats and adversaries knowledge
  • Partner with our data team to build the most efficient and useful log ingestion pipelines
  • Engineer detections on Spark in Python using Databricks (with good design, clean code, unit testing, full documentation).
  • Fuse numerous log types to implement anomaly- and ML-based intrusion detection on the Databricks platform.
  • Partner with Incident Response to provide rich logs, hunting playbooks and relevant alerts with full context, with near-zero false positives
  • Present at security / engineering conferences novel detection work and ideas

What we look for :

  • 5+ years of software engineering experience
  • 3+ years of Security-related engineering (Detection Engineering preferred)
  • Proficient in one major cloud, broad experience in at least one other major cloud (AWS, Azure or GCP)
  • Knowledge across two or more Security SME areas : Network security, Host / Disk analysis, Application / Log analysis, Memory / Malware analysis, Endpoint security
  • Experience with Python, Git / GitHub, and CI / CD automation.
  • Experience with applying machine learning (ML) to security problems.
  • Individuals who love to learn, execute fast, take feedback well, and give feedback in an environment of mutual respect and aid.
  • Communicates effectively with internal and external stakeholders; communicates recommendations and decisions through appropriate collateral (e.

g., design docs, tech talks, etc.

Benefits

  • Comprehensive health coverage including medical, dental, and vision
  • 401(k) Plan
  • Equity awards
  • Flexible time off
  • Paid parental leave
  • Family Planning
  • Fitness reimbursement
  • Annual personal development fund
  • Work headphones reimbursement
  • Employee Assistance Program (EAP)
  • Business travel accident insurance
  • Mental wellness resources

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents base salary range for non-commissionable roles or on-target earnings for commissionable roles.

Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location.

Based on the factors above, Databricks utilizes the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above.

For more information regarding which range your location is in visit our page .

Zone 1 Pay Range$154,400 $273,200 USD

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents base salary range for non-commissionable roles or on-target earnings for commissionable roles.

Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location.

Based on the factors above, Databricks utilizes the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above.

For more information regarding which range your location is in visit our page .

Zone 1 Pay Range$135,700 $240,000 USDZone 2 Pay Range$122,100 $216,000 USDZone 3 Pay Range$115,000 $204,000 USDZone 4 Pay Range$108,000 $192,000 USD

24 days ago
Related jobs
Promoted
SpaceX
Redmond, Washington

OR 5 years of professional experience in security engineering with a Bachelor's degree in cybersecurity, computer science, or other STEM discipline. SECURITY SOFTWARE ENGINEER (STARLINK) - TOP SECRET CLEARANCE. Security Software Engineer you will help Starlink monitor and investigate our production ...

Promoted
Microsoft
Redmond, Washington

As a Security Detection Engineer, you will work as part of a team that streamlines security data collection and alerting to deliver actionable insights for our security team. As a Security Detection Engineer, you will work as part of a team that streamlines security data collection and alerting to d...

Promoted
SpaceX
Redmond, Washington

SOFTWARE ENGINEER (SECURITY - BLUE TEAM). SpaceX is hiring a security software engineer to help protect and drive the SpaceX mission. Our engineers are responsible for building innovative security solutions to protect against threats to our rockets, spacecraft, and our global satellite internet cons...

Promoted
F5
Seattle, Washington

Security Engineer with experience owning vulnerability management and code security program. We collaborate with software architects, security defenders, Operations, SRE, compliance specialists, and business leaders to understand the components of the platform and their requirements around vulnerabi...

Promoted
Warner Bros. Discovery
Bellevue, Washington

With constant security threats and attacks occurring in companies around the globe and across all industries, we are expanding the team and continue to implement latest security tools and resources to protect the Company from ever-growing threats and malicious intent. Developing and implementing sec...

SpaceX
Redmond, Washington

As a Security Software Engineer you will influence the security of software across our product lines. SECURITY SOFTWARE ENGINEER (STARLINK). Design and build security infrastructure for Starlink, including cryptographic services and other security-critical services. Bachelor's degree in computer sci...

Amazon.com Services LLC
Seattle, Washington

Amazon Security Finance is seeking a Business Intelligence Engineer (BIE) who is passionate about data, analytics, science, and automation. Partner with Amazon Security Finance and its customers to gather requirements, and collaborate with technology partners to design scalable data pipelines and da...

Aurora
Seattle, Washington

Senior Staff Security Engineer - Detection and Response. Contribute to the design and development of engineering solution that support enterprise wide security initiatives. In this role, you will lead the design and implementation of Aurora's Detection and Response strategy across Aurora's enterpris...

SpaceX
Redmond, Washington

Security Software Engineer, you will influence the security of software across our Starlink product lines. SECURITY SOFTWARE ENGINEER (STARLINK GROUND NETWORKING). Security monitoring and detection. Design and build security infrastructure for Starlink, including cryptographic services and other sec...

Amazon Web Services, Inc.
Seattle, Washington

Own security design and architecture choices (includes architecture reviews, threat modeling, code reviews and security testing). Lead projects that involve multiple engineers working on security initiatives, delivering pragmatic outcomes. Ability to drive multiple technically complex security revie...