Berlin Office; Denmark; Estonia; Latvia; Slovenia; Hungary; Portugal; Poland; Serbia; Germany; Austria; Finland; Ireland; Bulgaria; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece (Remote) · Full-time · Lead · Sales & marketing
Staff Security Engineer, Incident Response
For international applicants
Visa
In Saudi Arabia the employer usually arranges the work visa (country practice; the posting doesn’t say).
Check the posting for nationality or residence rules.
More about this
In these Gulf countries the employer normally applies for the work visa and residence permit. This is how hiring works there, not an offer written in the posting, and it applies only to these locations.
Remote work
Remote locations: Belgium, Croatia, Finland, Ireland, Israel, Norway, Portugal, Denmark, France, Germany, Italy, Netherlands, Spain, Sweden, United Kingdom, Saudi Arabia, Serbia, Switzerland
Remote does not mean work from any country. Confirm permitted countries and work authorization before applying.
Your work rights
Confirm requirements with employer
- Remote · Belgium, Croatia, Finland, Ireland, Israel, Norway, Portugal, Denmark, France, Germany, Italy, Netherlands, Spain, Sweden, United Kingdom, Saudi Arabia, Serbia, Switzerland
- Salary not disclosed
- Employment type: Full-time ·
- Level: Lead
Get similar jobs with visa sponsorshipIT & software jobs worldwide with visa sponsorship
About the employer
Expat Jobs has not reviewed this employer's identity. Check the original posting and the employer's own site before sharing documents.
Licensed sponsor (UK)This employer holds a UK work-visa sponsor licence. It doesn't guarantee this job offers sponsorship — confirm with the employer.
Recognised sponsor (NL)This employer is recognised by the IND as a sponsor for work permits. It doesn't guarantee this job offers sponsorship — confirm with the employer.
Fast-track certified (DK)This employer is certified by SIRI for Denmark's Fast-track scheme for hiring foreign staff. It doesn't guarantee this job offers sponsorship — confirm with the employer.
Source: Register of licensed sponsors: workers, UK Home Office. Contains public sector information licensed under the Open Government Licence v3.0.
Source: Public register of recognised sponsors, Immigration and Naturalisation Service (IND).
Source: Certified companies, Danish Agency for International Recruitment and Integration (SIRI).
Remote work schedule
The posting does not say where the team works. Add the employer timezone below if you know it.
Change timezones or hours
Employer hours use a 09:00–17:00 planning assumption. Overlap is for today's date, including daylight saving, and does not establish permission to work from your country.
Description (EN)
RDQ327R180
Staff Security Engineer, Incident Response
The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing "Security for Databricks on Databricks", using our own platform to create near-real-time log analytics, alerting and forensics.
You will be an individual contributor on the security Incident Response (IR) team at Databricks, reporting to the regional IR manager. You will be responsible for conducting security analysis and forensics, responding to high-priority alerts and contributing to automations and agentic capabilities. You will be a security multiplier and help the team scale security incident response at Databricks.
The impact you will have:
- You will respond to incidents as part of a distributed 24x7 operations and on-call schedule.
- You will triage and respond to security events and alerts, ensuring quick and effective containment.
- You will conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events.
- You will provide technical leadership and influence team direction.
- You will develop solutions, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team.
- You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews.
What we look for:
- Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience.
- Cloud security expertise in at least 1 of AWS, GCP or Azure, and proficiency in the others.
- Proficiency in AI/LLM and agentic capabilities. Prefer experience with building and operating agentic systems in a security setting.
- Broad security subject matter expertise.
- Expertise in a few core IR skills (DFIR , Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, etc.).
- Experience with Enterprise Security and SaaS applications.
- Working knowledge of a SIEM and SOAR.
- Experience building Incident Response Tooling, scripting language skills and experience with AI coding tools.
About Databricks
Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.
Benefits
At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.
Our Commitment to Diversity and Inclusion
At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.
Compliance
If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.
Never pay a recruiter for a job offer or a visa promise. Check the original posting and employer identity before sharing documents. Pay any legitimate government visa fees only through official channels.
Similar vacancies
Belgium · Full-time · Junior
The posting doesn’t say whether it sponsors.
The posting doesn’t say whether the employer sponsors visas. Ask before you apply.
Requirements
Antwerp, Belgium · Full-time · Junior · Logistics & transport
Language statements vary
“Highly proficient in both spoken and written English and Dutch (Common European Framework of Reference C1)”
Statements differ across the posting or its locations. Check the requirement for your role.
You must already have the right to work.
The posting accepts only candidates who already have the right to work, such as citizenship or a work permit, and doesn’t offer sponsorship. “- You must have the right to work in the country of employment by the start date.”
Requirements
Belgium · Full-time · Manufacturing
The posting doesn’t say whether it sponsors.
The posting doesn’t say whether the employer sponsors visas. Ask before you apply.