Job Overview
Location
United States
Job Type
Full-time
Category
Data Science
Date Posted
June 22, 2026
Full Job Description
đź“‹ Description
- • Lead full Security Development Lifecycle (SDLC) processes for all code developed within Databricks, including features from both engineering and non-engineering teams, to prevent vulnerabilities in production.
- • Conduct security design reviews and threat modeling using block diagrams of data flow to identify architectural flaws and design-level risks.
- • Perform manual code reviews in Python, Java, Scala, or JavaScript to detect security defects and misconfigurations in production-grade codebases.
- • Write exploits and construct exploit chains to validate the severity and exploitability of identified vulnerabilities in Databricks services.
- • Collaborate with Incident Response (IR) and Vulnerability Response Program (VRP) teams to investigate, triage, and remediate reported security issues and product incidents.
- • Analyze results from Static Application Security Testing (SAST) tools to distinguish false positives from genuine vulnerabilities and file accurate defect reports.
- • Develop and enhance Dynamic Application Security Testing (DAST) automation to enable auto-assessment of applications and streamline defect filing workflows.
- • Maintain and extend the security automation framework to support compliance requirements such as FedRAMP, PCI DSS, and HIPAA.
- • Prioritize security initiatives based on risk management principles rather than rigid compliance checklists, ensuring alignment with business objectives.
- • Partner with global security teams across the US and EMEA to standardize and improve product security processes and increase overall organizational efficiency.
- • Drive the implementation of new security processes that enhance the productivity of the product security organization and embed security early in the SDLC.
- • Work with fuzzing tools and techniques to uncover memory corruption, injection flaws, and other runtime vulnerabilities in complex distributed systems.
- • Translate security findings into actionable engineering tasks and collaborate with product and engineering teams to remediate issues without impeding development velocity.
- • Stay current with emerging threats, attack patterns, and security tooling to continuously improve Databricks’ defensive posture and proactive detection capabilities.
🎯 Requirements
- • Experience with Threat Modeling and identifying design flaws from data flow diagrams
- • Proficiency in at least two of the following domains: Web Security, Cloud Security, Systems Security, or Applied Cryptography
- • Proficient in reading and analyzing code in Python, Java, Scala, or JavaScript to identify security defects
- • Skilled in scripting and automation for exploit development
- • Exploit writing skills are required
- • Fuzzing skills are a positive addition
🏖️ Benefits
- • Annual performance bonus eligibility
- • Equity compensation
- • Comprehensive benefits package (details available via provided link)
- • Pay transparency with zone-based salary ranges ($182,900–$314,250 USD)
Skills & Technologies
See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.
About Databricks Inc.
Databricks provides a unified data and AI platform built on Apache Spark. Its lakehouse architecture combines data lakes and warehouses to enable collaborative analytics, machine learning, and real-time processing at scale. The company offers managed cloud services, Delta Lake storage, MLflow for ML lifecycle, and collaborative notebooks. Founded in 2013 by the creators of Spark, Databricks serves enterprises seeking to unify data engineering, data science, and business analytics on a single platform.
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
Similar Opportunities
2 months ago
2 months ago
Hangar Aviation Technologies, Inc.
2 months ago
Singular Intelligence Ltd.
25 days ago