Sr. Enterprise Security Engineer

📋 Description

• • Serve as an L5 Enterprise Security Engineer to expand security coverage across Databricks’ rapidly evolving enterprise environment, focusing on securing applications, cross-system integrations, data flows, and emerging AI-adjacent use cases.
• • Conduct security design and architecture reviews for enterprise applications, SaaS platforms, internal systems, and third-party integrations to identify risks and enforce secure design principles.
• • Evaluate modern access patterns including MCP, API security, token handling, secrets management, and least privilege implementations across interconnected enterprise systems.
• • Assess data flows, trust boundaries, logging and monitoring controls, and security posture across cloud-based and hybrid enterprise platforms.
• • Partner closely with IT, Engineering, Legal, Privacy, Procurement, and business stakeholders to surface security risks early, define actionable requirements, and enable scalable adoption of secure patterns.
• • Drive security outcomes through technical judgment, influence, and process improvement rather than enforcement, ensuring alignment with business objectives and operational resilience.
• • Strengthen Enterprise Security’s capability to assess and guide AI-adjacent security, integration security, and cross-system data flow risks with consistent, scalable review practices.
• • Translate complex technical security risks into clear, actionable guidance for non-technical stakeholders to improve organizational security posture.
• • Apply expertise in authentication, authorization, SSO, federation, SCIM, and identity management to secure enterprise-wide access controls and user provisioning workflows.
• • Evaluate emerging integration patterns and automation platforms for security implications, ensuring controls keep pace with technological innovation.
• • Contribute to the evolution of security standards for cloud platforms, enterprise identity systems, audit logging, encryption, data retention, and incident response.
• • Support the secure adoption of new technologies by providing early-stage security input during design and procurement phases.
• • Maintain awareness of evolving threats and regulatory expectations impacting enterprise security in SaaS and AI-connected environments.
• • Improve the quality and consistency of security reviews across enterprise platforms by establishing repeatable frameworks and documentation standards.
• • Collaborate with global teams to ensure security practices are aligned across regions while respecting local compliance and operational constraints.