Sr. Manager, Security — Continuous Monitoring v 2.0
California · 2+ years experience · Remote · Posted Sep 21, 2026
At a glance
- Experience
- 2+ years experience
- Workplace
- Remote
- Location
- California
About Databricks
- Databricks is the data and AI company. More than 12,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI.
- Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow.
About the role
- Databricks is looking for a Senior Manager to lead the Continuous Monitoring team.
- You will own the engineering function that measures whether Databricks' security controls are working across cloud infrastructure, identity, SaaS, and enterprise systems.
- This is an engineering management role where the team writes production Python, operates data pipelines against cloud and SaaS APIs, and integrates with GRC and security tooling.
Responsibilities
- Hire strong Security Software Engineers who bring genuine engineering skill to compliance automation.
- Support engineers in their career development with clear, specific feedback; develop senior ICs into technical leaders and grow the next generation of security engineering managers.
- Set and hold a high bar for engineering quality: code review standards, reliability and observability expectations for automation pipelines, and documentation that remains useful across audit cycles and team changes.
- Own the strategy and roadmap for Databricks' continuous monitoring platform — control state collection at cloud scale, continuous posture assessment, security and GRC tooling integration, and remediation tracking.
- Define what the program measures and why: prioritize the controls whose failure would matter most to Databricks' security posture.
- Ensure coverage keeps pace with the business — new cloud environments, new products and services, new certifications and regulatory obligations, and AI governance controls that current tooling does not yet assess.
- Reduce manual evidence collection systematically; set and track targets for automated control coverage, freshness, and audit burden on Engineering teams.
- Own the security posture dashboards, metrics, and reporting that give Security and GRC leadership an accurate, timely view of control health across the company.
- Establish productive working relationships with GRC, Enterprise Security, Product Security, Security Operations, IT, Legal, and Engineering leadership.
- Lead build-vs.-buy evaluations for CSPM, SSPM, GRC automation, and security posture tooling.
Requirements
- 2+ years of prior management experience leading Engineering or Security engineering teams.
- Typically 12+ years of experience, or an advanced degree plus 8 years, preferably focused on security engineering, security posture monitoring, or compliance automation.
- Sufficient technical depth to review the work of the team: can read and critique Python automation, evaluate an integration architecture, and assess whether a monitoring approach will hold up in production.
- Solid understanding of security controls and where they fail in practice — identity and access, configuration management, logging coverage, vulnerability management, and data protection.
- Solid cloud security knowledge across at least one major platform (AWS, Azure, GCP) — IAM, audit logging, CSPM concepts, and cloud-native security services.
- Working knowledge of compliance frameworks (SOC 2, ISO 27001, FedRAMP, or equivalent) at a level sufficient to assess whether a control monitoring design will satisfy an auditor.
- Previous experience building security posture monitoring or compliance automation at scale, with attention to accuracy, coverage, and cost tradeoffs.
- Focused on defining and driving efficiencies and improvements within the team; accountable for defining and achieving targets (e.g. OKRs, KPIs).
- Makes effective priority decisions on resourcing and alignment within the team.
- Strong communicator across technical, GRC, and executive audiences.
Preferred qualifications
- Experience with cloud security posture management (CSPM/SSPM) platforms at an architecture level.
- Experience with FedRAMP continuous monitoring programs at a leadership level.
- Hands-on background with GRC automation platforms (Vanta, Drata, ServiceNow GRC, Archer, or equivalent) at an implementation or architecture level.
- Experience building automated monitoring for AI system controls and AI governance frameworks.
- Track record of building or scaling a security measurement or compliance engineering function from early-stage to mature operations.
- Background in security operations, detection engineering, or security architecture that informs which controls are worth measuring.
- Experience with front-end development.
- CISSP, CISM, CISA, or equivalent certifications.
Benefits
- annual performance bonus
- equity
Skills
- Python
- AWS
- Azure
- GCP
- CSPM
- SSPM
- Vanta
- Drata
- ServiceNow GRC
- Archer
