Sr. Security Engineer, Enterprise Security
California · 7+ years experience · Remote · Posted Oct 12, 2026
At a glance
- Experience
- 7+ years experience
- Workplace
- Remote
- Location
- California
About Databricks
- Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.
About the role
- As a Sr. Security Engineer on the Enterprise Security team, you turn security requirements into working protections across Databricks' enterprise environment.
- You implement, integrate, test, and improve security controls across enterprise applications, identity, endpoint, network, SaaS, and data-security systems.
- You bring strong hands-on engineering experience, developing automation and reusable capabilities that strengthen preventive controls, improve security coverage, and reduce repetitive manual work.
Responsibilities
- Implement and improve preventive security controls across enterprise systems, translating approved security requirements into tested, operational protections.
- Partner with security domain leads, IT, and platform owners to implement access, configuration, endpoint, network, and data-protection guardrails.
- Develop reusable technical implementations and secure configuration patterns that improve consistency and reduce recurring security gaps.
- Build and maintain security automation using Python, Go, APIs, Terraform, or comparable technologies to improve control enforcement and operational efficiency.
- Automate recurring configuration checks, access validation, evidence collection, and remediation workflows to reduce dependency on manual security processes.
- Develop and integrate AI-assisted and agent-based security automation to streamline recurring reviews, control validation, and remediation workflows, with appropriate access controls, testing, and auditability.
- Integrate security platforms and enterprise systems to streamline established review and approval workflows, surface actionable findings, and support consistent enforcement.
- Develop automated testing, monitoring, and validation capabilities to confirm security controls operate as intended.
- Identify control gaps, configuration drift, and ineffective enforcement; partner with system owners to implement and validate remediation.
- Troubleshoot complex implementation challenges involving authentication, API integrations, permissions, configurations, and security tooling.
Requirements
- 7+ years of experience in security engineering, enterprise security, infrastructure security, cloud security, or a related field.
- Demonstrated hands-on experience implementing, integrating, testing, and maintaining security controls in production enterprise environments.
- Strong programming and automation skills using Python, Go, or comparable languages, including API integrations, infrastructure-as-code, and version control.
- Experience engineering security controls across one or more domains, such as identity, endpoint, SaaS, cloud, network, or data protection.
- Strong understanding of authentication, authorization, SSO, OAuth, service identities, API security, secrets management, and least-privilege principles.
- Experience developing automated security checks, configuration validation, drift detection, and remediation workflows.
- Hands-on experience building or integrating AI-assisted or agent-based security automation, including appropriate access controls, testing, monitoring, and auditability.
- Ability to translate approved security requirements into preventive controls, troubleshoot implementation challenges, and validate control effectiveness.
- Experience applying reliable software engineering practices, including automated testing, CI/CD, error handling, and operational monitoring.
- Demonstrated ability to independently deliver security engineering improvements, collaborate with Security, IT, and platform owners, and achieve measurable security outcomes.
Preferred qualifications
- Experience implementing security controls across multiple enterprise security domains rather than specializing in a single area.
- Familiarity with enterprise security platforms and technologies such as Okta, Google Workspace, CrowdStrike, Jamf, Prisma Access, or similar solutions.
- Experience with specialized policy-as-code frameworks such as Open Policy Agent (OPA), Rego, or comparable enforcement technologies.
- Experience securing enterprise data and AI platforms, including Databricks or comparable technologies.
- Experience working in large-scale or rapidly growing cloud and SaaS environments.
Benefits
- Annual performance bonus eligibility
- Equity eligibility
Skills
- Python
- Go
- APIs
- Terraform
- SSO
- OAuth
- Okta
- Google Workspace
- CrowdStrike
- Jamf
- Prisma Access
- Open Policy Agent
Show all 15 skills
- Rego
- Databricks
- CI/CD
