Get the chrome extension Sr. Security Engineer, Enterprise Security
Databricks
RDQ427R608
While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered.
---
About the Team
The Enterprise Security team at Databricks is responsible for securing the corporate environment, including the SaaS platforms, internal tools, integrations, automation workflows, and AI-adjacent systems that Databricks employees and operations depend on.
We work at the intersection of enterprise architecture, security engineering, and business enablement, partnering with IT, Engineering, Legal, Privacy, and Procurement to surface risk early, set enforceable security standards, and enable the business to operate securely at scale.
The Role
As a Sr. Security Engineer on the Enterprise Security team, you turn security requirements into working protections across Databricks' enterprise environment.
You implement, integrate, test, and improve security controls across enterprise applications, identity, endpoint, network, SaaS, and data-security systems. You bring strong hands-on engineering experience, developing automation and reusable capabilities that strengthen preventive controls, improve security coverage, and reduce repetitive manual work.
You work closely with security domain leads, IT, and platform owners to translate approved security designs into practical implementations. Your focus is on delivering reliable controls, automating recurring security checks and workflows, and continuously validating that protections remain effective as enterprise systems evolve.
The Impact You Will Have
Security Control Engineering & Implementation
Implement and improve preventive security controls across enterprise systems, translating approved security requirements into tested, operational protections.
Partner with security domain leads, IT, and platform owners to implement access, configuration, endpoint, network, and data-protection guardrails.
Develop reusable technical implementations and secure configuration patterns that improve consistency and reduce recurring security gaps.
Security Automation & Integrations
Build and maintain security automation using Python, Go, APIs, Terraform, or comparable technologies to improve control enforcement and operational efficiency.
Automate recurring configuration checks, access validation, evidence collection, and remediation workflows to reduce dependency on manual security processes.
Develop and integrate AI-assisted and agent-based security automation to streamline recurring reviews, control validation, and remediation workflows, with appropriate access controls, testing, and auditability.
Integrate security platforms and enterprise systems to streamline established review and approval workflows, surface actionable findings, and support consistent enforcement.
Continuous Control Validation & Remediation
Develop automated testing, monitoring, and validation capabilities to confirm security controls operate as intended.
Identify control gaps, configuration drift, and ineffective enforcement; partner with system owners to implement and validate remediation.
Measure improvements in security coverage, control effectiveness, automation reliability, and reduced manual effort.
Cross-Functional Security Engineering
Partner with Enterprise Security, IT, Engineering, and business-system owners to deliver security improvements across interconnected enterprise platforms.
Troubleshoot complex implementation challenges involving authentication, API integrations, permissions, configurations, and security tooling.
Contribute to Security by Design initiatives by translating recurring security requirements into reusable controls, automated checks, and secure defaults.
What We Look For
7+ years of experience in security engineering, enterprise security, infrastructure security, cloud security, or a related field.
Demonstrated hands-on experience implementing, integrating, testing, and maintaining security controls in production enterprise environments.
Strong programming and automation skills using Python, Go, or comparable languages, including API integrations, infrastructure-as-code, and version control.
Experience engineering security controls across one or more domains, such as identity, endpoint, SaaS, cloud, network, or data protection.
Strong understanding of authentication, authorization, SSO, OAuth, service identities, API security, secrets management, and least-privilege principles.
Experience developing automated security checks, configuration validation, drift detection, and remediation workflows.
Hands-on experience building or integrating AI-assisted or agent-based security automation, including appropriate access controls, testing, monitoring, and auditability.
Ability to translate approved security requirements into preventive controls, troubleshoot implementation challenges, and validate control effectiveness.
Experience applying reliable software engineering practices, including automated testing, CI/CD, error handling, and operational monitoring.
Demonstrated ability to independently deliver security engineering improvements, collaborate with Security, IT, and platform owners, and achieve measurable security outcomes.
Nice to Have
Experience implementing security controls across multiple enterprise security domains rather than specializing in a single area.
Familiarity with enterprise security platforms and technologies such as Okta, Google Workspace, CrowdStrike, Jamf, Prisma Access, or similar solutions.
Experience with specialized policy-as-code frameworks such as Open Policy Agent (OPA), Rego, or comparable enforcement technologies.
Experience securing enterprise data and AI platforms, including Databricks or comparable technologies.
Experience working in large-scale or rapidly growing cloud and SaaS environments.
Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected base salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipated utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.
About Databricks
Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.
BenefitsAt Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.
Our Commitment to Diversity and Inclusion
At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.
Compliance
If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.
Originally posted on Himalayas
Enterprise Security Engineer
Jenzabar
The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments.
ESSENTIAL TASKS
Enterprise Security Architecture:
- Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure
- Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks
- Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles
Cloud Security (Azure & GCP):
- Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling
- Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure
- Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns.
- Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization’s transition from Windows-based environments to modernized cloud-native deployments
- Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards
Security Infrastructure & Tooling:
- Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms
- Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture
- Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation
Infrastructure Security:
- Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations.
- Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams.
- Design and implement secure data handling standards, encryption policies, and key management practices.
AI Utilization:
- Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate.
- Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight.
PREFERRED SKILLS AND EXPERIENCE
- 5+ years in enterprise security engineering, infrastructure security, or a systems engineering role with strong security responsibilities
- Experience designing and securing corporate back office and hybrid cloud environments
- Expertise with major cloud platforms, particularly Azure and Google Cloud Platform (GCP), and cloud-native security features
- Hands-on experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies. Demonstrated fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL)
- Strong understanding of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions
- Proficiency with infrastructure-as-code (IaC) tools and automation scripting using PowerShell or Python
- Strong knowledge of networking, encryption, certificates, and security protocols
- Excellent communication skills with the ability to work effectively across cross-functional teams
The pay range for this position is $83,000-$95,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for an annual bonus in addition to a full range of benefits. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed.
Benefits
Medical Insurance, Life Insurance, Dental Insurance, Vision Insurance, PTO, Paid Parental Leave, Paid Holidays, Short Term Disability, Long Term Disability, 401K, Educational Assistance
Jenzabar does not discriminate in employment opportunities or practices on the basis of race, color, sex, gender, gender identity, pregnancy, childbirth and related medical conditions, genetics, genetic markers and carrier status, creed, religion, national origin, ancestry, age, disability, medical condition, marital status, sexual orientation, military service, veteran status, or any other status protected by state and federal laws.
Please Note: Jenzabar does not sponsor applicants for work visas.
Electronic Monitoring Notice:
Job applicants are advised that Jenzabar reserves the right to monitor, access, review, and disclose electronic activity conducted on Company‑owned devices, networks, and systems, as well as activity involving Jenzabar applications or accounts accessed on personal devices. Monitoring may include email, messaging, internet usage, files, applications, and other electronic communications or data, and is performed for security, compliance, and operational purposes.
Originally posted on Himalayas