Sr. Manager, Security — Continuous Monitoring v 2.0
Databricks is a data and AI platform that lets organizations build analytics, AI agents, and applications on a unified, governed lakehouse.
Funding history
Investors
About Databricks
Data engineers, analysts, and AI teams use Databricks to process large datasets, build reliable pipelines, and train models on a single governed platform. Users can run SQL analytics, serve ML predictions in real time, and deploy AI agents grounded in enterprise data. Its open lakehouse architecture provides consistent security and governance across analytical and operational workloads.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead the Continuous Monitoring engineering team that measures whether Databricks' security controls are working across cloud, identity, SaaS, and enterprise systems. You will hire and grow engineers, own the strategy and roadmap for the monitoring platform, define metrics and reporting for leadership, partner across GRC, IT, Legal, and Engineering, and lead build-vs-buy decisions for posture tooling.
Requirements
- 2+ years of prior management experience leading Engineering or Security engineering teams
- Typically 12+ years of experience, or an advanced degree plus 8 years, preferably in security engineering, posture monitoring or compliance automation
- Technical depth to review Python automation and integration architecture
- Solid understanding of security controls: identity and access, configuration management, logging, vulnerability management, data protection
- Solid cloud security knowledge in AWS, Azure or GCP
- Working knowledge of compliance frameworks (SOC 2, ISO 27001, FedRAMP)
- Experience building security posture monitoring or compliance automation at scale
- Strong communication across technical, GRC and executive audiences
Responsibilities
- Hire and develop Security Software Engineers and future engineering managers
- Set and hold a high bar for engineering quality, reliability and documentation
- Own the strategy and roadmap for the continuous monitoring platform
- Define what the program measures and prioritize high-impact controls
- Reduce manual evidence collection through automation and track coverage targets
- Own accuracy of findings including false positive rates
- Own posture dashboards, metrics and reporting for Security and GRC leadership
- Present control gaps, drift and risk implications to senior leadership
- Partner with GRC, Enterprise Security, Product Security, Security Operations, IT, Legal and Engineering
- Lead build-vs-buy evaluations for CSPM, SSPM and GRC automation tooling
- Keep program operating costs defensible
- Track emerging frameworks such as SOC 2, FedRAMP and AI governance and translate them into roadmap decisions
Benefits
- Eligibility for annual performance bonus
- Equity