Product-Security, Application-Security, Security-Engineering Jobs

RDQ226R605; This role can be based remotely anywhere in the United States.

The AI Security Engineering team at Databricks builds the security tools, detection systems, and engineering infrastructure that protect Databricks' AI platform and the AI capabilities our customers depend on. We are the builders — designing and shipping security tooling that scales AI threat detection, automates security assessment of AI systems, and gives Databricks and its customers high-confidence assurance that AI capabilities are operating securely. We sit at the intersection of security engineering and AI systems: we understand how AI systems work, how they can be attacked, and how to build engineering solutions that keep them safe at scale.

---

As a Staff Security Software Engineer on the AI Security Engineering team, you set the technical direction for AI security engineering at Databricks — defining the architecture, standards, and methodology by which the team builds tooling for AI security assessment, detection, and defense. You are recognized across the Security organization as the authority on AI security engineering: the person engineering leadership consults when AI security tooling decisions have organizational-scale consequences.

You operate across team and organizational boundaries — aligning the AI Security Engineering team's technical roadmap with the detection, GRC, and product security teams that depend on its outputs, and driving AI security engineering standards that the whole security organization can adopt.

---

The Impact You Will Have

AI Security Engineering Architecture

• Define the architecture and technical strategy for Databricks' AI security tooling platform — spanning adversarial testing, behavioral monitoring, threat detection, and automated assessment of AI components
• Set engineering standards for the team: design review processes, reliability requirements, observability practices, security properties of the tooling itself, and integration patterns with downstream consumers
• Own the technical decisions on how the team's systems scale to cover Databricks' growing AI surface, how they integrate with product security and detection pipelines, and what tooling capabilities to build vs. buy vs. open-source

AI Threat Detection at Scale

• Lead the design and development of AI platform capabilities that operate at production scale — behavioral analysis of usage, detection of prompt injection attempts, anomaly detection on agentic workflow behavior
• Define the methodology for AI security assessment: how Databricks systematically evaluates new AI capabilities against a comprehensive threat model before deployment and monitors them continuously after
• Drive technical strategy for AI red-teaming tooling: automated adversarial testing platforms that simulate how real attackers attempt to abuse Databricks' AI systems

Cross-Organizational Technical Leadership

• Serve as the technical authority on AI security engineering for the Product Security, SITH, IR, and ConMon teams — ensuring that AI security tooling outputs integrate cleanly into their workflows and meet their detection and assessment needs
• Represent AI Security Engineering in architecture reviews, platform security decisions, and cross-team technical discussions where AI security engineering considerations are material
• Establish AI security engineering standards that teams building AI-connected systems can adopt — reusable patterns for securing AI components in the Databricks platform

Mentorship & Team Capability

• Mentor senior and mid-level engineers on AI security engineering architecture, adversarial threat modeling, and technical leadership
• Lead design reviews, define team engineering practices, and drive continuous improvement in the quality and reliability of AI security tooling

---

What We Look For

• 7–10 years of experience in security software engineering, security engineering, or a closely related discipline; with demonstrated technical leadership of security tooling programs and organizational-level impact
• Expert Python engineering: designs and delivers production systems at scale; understands observability, reliability engineering, and how security tooling integrates into larger security operations ecosystems
• Deep expertise in AI/ML security — adversarial ML, prompt injection, model security, agentic framework trust boundaries — at both a research-informed and engineering-practical level
• Experience designing security tooling architectures that span multiple teams and systems — not just building features, but defining how the platform is structured, scaled, and maintained
• Strong technical communicator: can align engineering and security leadership on architectural direction and drive cross-team adoption of standards and patterns
• Track record of shipping high-quality security tooling that other teams depend on in production

Nice to Have

• Research contributions or deep familiarity with adversarial ML, AI safety, or AI red-teaming methodology
• Experience with MLOps platforms, AI serving infrastructure, or AI platform security at cloud scale
• Familiarity with AI governance standards (NIST AI RMF, ISO/IEC 42001, EU AI Act technical provisions) as they apply to security engineering
• Open-source contributions or publications in AI security, adversarial ML, or security tooling

Originally posted on Himalayas

About Us:

YipitData is the leading market research and analytics firm for the disruptive economy and most recently raised $475M from The Carlyle Group at a valuation of over $1B. Every day, our proprietary technology analyzes billions of alternative data points to uncover actionable insights across sectors like software, AI, cloud, e-commerce, ridesharing, and payments.

Our data and research teams transform raw data into strategic intelligence, delivering accurate, timely, and deeply contextualized analysis that our customers—ranging from the world’s top investment funds to Fortune 500 companies—depend on to drive high-stakes decisions. From sourcing and licensing novel datasets to rigorous analysis and expert narrative framing, our teams ensure clients get not just data, but clarity and confidence.

We operate globally with offices in the US, APAC, and India. Our award-winning, people-centric culture—recognized by Inc. as a Best Workplace for three consecutive years—emphasizes transparency, ownership, and continuous mastery.

What It’s Like to Work at YipitData:

YipitData isn’t a place for coasting—it’s a launchpad for ambitious, impact-driven professionals.

From day one, you’ll take the lead on meaningful work, accelerate your growth, and gain exposure that shapes careers.

Why Top Talent Chooses YipitData:

• Ownership That Matters: You’ll lead high-impact projects with real business outcomes
• Rapid Growth: We compress years of learning into months
• Merit Over Titles: Trust and responsibility are earned through execution, not tenure
• Velocity with Purpose: We move fast, support each other, and aim high—always with purpose and intention

If your ambition is matched by your work ethic—and you're hungry for a place where growth, impact, and ownership are the norm—YipitData might be the opportunity you’ve been waiting for.

About The Role:

YipitData is looking for a Product Security Engineer to help build security into the products and services we deliver to customers.

In this role, you will partner closely with Engineering and Product teams throughout the development lifecycle. You will assess new products and technologies, lead threat modeling and security design reviews, identify vulnerabilities, and help teams implement practical fixes before issues reach production.

This is a hands-on role for someone who understands how modern applications are designed and built. You should be comfortable reviewing system architecture, analyzing vulnerabilities, working directly with engineers, and improving the security tools embedded in our development pipelines.

This is a remote-friendly opportunity that can sit in NYC (where our headquarters is located), one of our office hubs, or anywhere else in the US. However, depending upon where the remote work is performed, income could be subject to New York State tax withholding.

The work hours are flexible on this team, but most employees work East Coast hours.

As Our Product Security Engineer, You Will:

• Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production
• Dig into application architecture, APIs, authentication, authorization, data flows, cloud services, and third-party integrations to understand how systems could be attacked
• Find and validate vulnerabilities, separate real risk from noise, and help teams prioritize what actually matters
• Work alongside engineers to design remediate plans that protect customers without bringing development to a halt
• Own and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning
• Tune security tools and workflows so engineers receive useful findings instead of a flood of false positives
• Build automation that allows Product Security to keep pace as our products, engineering teams, and use of AI continue to grow
• Turn security lessons into clear standards, secure design patterns, coding guidance, and documentation engineers will actually use
• Help lead the response when product security issues arise, from initial investigation and containment through root cause analysis and long-term remediation
• Become a trusted partner to Engineering and Product by bringing strong security judgment and workable solutions to difficult decisions
• Explore emerging risks across cloud and AI-enabled products and help YipitData prepare for attack techniques that do not yet have a standard playbook

You Are Likely To Succeed If:

• You have worked in product security, application security, software engineering, penetration testing, or another role that taught you how applications are built and broken
• You can look at a complex system, follow the data, identify trust boundaries, and quickly understand where the real risks may be hiding
• You know how to threat model, review architecture, and assess applications without relying entirely on a checklist
• You can validate a vulnerability, determine whether it is actually exploitable, and explain why it matters to both engineers and business leaders
• You are comfortable working across APIs, cloud services, containers, serverless technologies, and CI/CD pipelines
• You have worked with tools such as SAST, DAST, dependency scanning, secret scanning, or infrastructure-as-code scanning, and know that getting useful results takes more than simply turning them on
• You can read and write code and are excited to automate repetitive security work using Python, JavaScript, or a similar language
• You bring strong judgment and can balance security, customer impact, engineering effort, and business priorities
• You communicate clearly, ask thoughtful questions, and can build credibility with both technical and non-technical teams
• You have secured AI-enabled products, agents, large language model applications, or MCP integrations and are excited by risks that do not yet have a perfect playbook
• You have deep experience with identity, authentication, authorization, or multi-tenant application security
• You have applied frameworks such as the OWASP Top 10, OWASP MCP Top 10, OWASP ASVS, or NIST in real-world environments
• You enjoy working across multiple products and engineering teams in an environment where priorities move quickly and no two days look exactly the same

What We Offer:

Our compensation package includes comprehensive benefits, perks, and a competitive salary:

• We care about your personal life, and we mean it. We offer flexible work hours, flexible vacation, a generous 401K match, parental leave, team events, wellness budget, learning reimbursement, and more!
• Your growth at YipitData is determined by the impact that you are making, not by tenure, unnecessary facetime, or office politics. Everyone at YipitData is empowered to learn, self-improve, and master their skills in an environment focused on ownership, respect, and trust. See more on our high-impact, high-opportunity work environment above!
• The annual base salary range for this position is anticipated to be $$180,000 / year. Final compensation may be determined by a number of factors, including, but not limited to, the applicant’s experience, knowledge, skills, abilities, and internal team benchmarks.

This role may be performed fully remotely within the United States. Please note that our US headquarters are located in NYC. If the remote work is performed outside of these offices, income may be subject to New York State tax withholding.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity employer.

Job Applicant Privacy Notice

Originally posted on Himalayas