Sr. Security Engineer, Enterprise Security

RDQ
427R608

While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered.

The Enterprise Security team at Databricks is responsible for securing the corporate environment, including the SaaS platforms, internal tools, integrations, automation workflows, and AI-adjacent systems that Databricks employees and operations depend on.
We work at the intersection of enterprise architecture, security engineering, and business enablement, partnering with IT, Engineering, Legal, Privacy, and Procurement to surface risk early, set enforceable security standards, and enable the business to operate securely at scale.

As a Sr. Security Engineer on the Enterprise Security team, you turn security requirements into working protections across Databricks' enterprise environment.
You implement, integrate, test, and improve security controls across enterprise applications, identity, endpoint, network, SaaS, and data-security systems. You bring strong hands‑on engineering experience, developing automation and reusable capabilities that strengthen preventive controls, improve security coverage, and reduce repetitive manual work.
You work closely with security domain leads, IT, and platform owners to translate approved security designs into practical implementations. Your focus is on delivering reliable controls, automating recurring security checks and workflows, and continuously validating that protections remain effective as enterprise systems evolve.

• Implement and improve preventive security controls across enterprise systems, translating approved security requirements into tested, operational protections.
• Partner with security domain leads, IT, and platform owners to implement access, configuration, endpoint, network, and data‑protection guardrails.
• Develop reusable technical implementations and secure configuration patterns that improve consistency and reduce recurring security gaps.

• Build and maintain security automation using Python, Go, APIs, Terraform, or comparable technologies to improve control enforcement and operational efficiency.
• Automate recurring configuration checks, access validation, evidence collection, and remediation workflows to reduce dependency on manual security processes.
• Develop and integrate AI‑assisted and agent‑based security automation to streamline recurring reviews, control validation, and remediation workflows, with appropriate access controls, testing, and auditability.
• Integrate security platforms and enterprise systems to streamline established review and approval workflows, surface actionable findings, and support consistent enforcement.

• Develop automated testing, monitoring, and validation capabilities to confirm security controls operate as intended.
• Identify control gaps, configuration drift, and ineffective enforcement; partner with system owners to implement and validate remediation.
• Measure improvements in security coverage, control effectiveness, automation reliability, and reduced manual effort.

• Partner with Enterprise Security, IT, Engineering, and business‑system owners to deliver security improvements across interconnected enterprise platforms.
• Troubleshoot complex implementation challenges involving authentication, API integrations, permissions, configurations, and security tooling.
• Contribute to Security by Design initiatives by translating recurring security requirements into reusable controls, automated checks, and secure defaults.

• 7+ years of experience in security engineering,…