<h3>RDQ326R15</h3><p>The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing "Security for <a href="https://himalayas.app/companies/databricks">Databricks</a> on <a href="https://himalayas.app/companies/databricks">Databricks</a>", using our own platform to create near-real-time log analytics, alerting and forensics.</p><p>You will be an individual contributor on the security Incident Response (IR) team at <a href="https://himalayas.app/companies/databricks">Databricks</a>, reporting to the regional IR manager. You will be responsible for conducting security analysis and forensics, responding to high-priority alerts and contributing to automations and agentic capabilities. You will be a security multiplier and help the team scale security incident response at <a href="https://himalayas.app/companies/databricks">Databricks</a>.</p><h3>The impact you will have:</h3><ul><li>You will respond to incidents as part of a distributed 24x7 operations and on-call schedule.</li><li>You will triage and respond to security events and alerts, ensuring quick and effective containment.</li><li>You will contribute to security investigations, conducting analysis and forensics across a range of data sources to determine the timeline and impact of security events.</li><li>You will build automations, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team.</li><li>You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews.</li></ul><h3>What we look for:</h3><ul><li>Bachelor's Degree AND 4+ years experience in Incident Response work OR Master's Degree AND 2+ years experience.</li><li>Strong cloud security background in at least 1 of AWS, GCP or Azure, and working knowledge of the others.</li><li>Knowledge of AI/LLM and agentic capabilities, including effective prompting and use of MCP, agents and agent skills. Prefer experience with building and operating agentic systems in a security setting.</li><li>Broad security subject matter expertise.</li><li>Expertise in few core IR skills (DFIR , Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, etc.).</li><li>Experience with Enterprise Security and SaaS applications.</li><li>Working knowledge of a SIEM and SOAR.</li><li>Experience building Incident Response Tooling and scripting language skills.</li></ul><div class="content-conclusion"><h3>About <a href="https://himalayas.app/companies/databricks">Databricks</a></h3><p><a href="https://himalayas.app/companies/databricks">Databricks</a> is the data and AI company. More than 10,000 organizations worldwide