Key skills

Security engineeringEnterprise securityApplication securityCloud securitySecurity design reviewsSecurity architecture reviewsSaaS platform securityAuthenticationAuthorizationSingle Sign-On (SSO)FederationSCIMAPI securityToken handlingSecrets managementLeast privilege designData flow assessmentThird-party integrationsTrust boundary securityLogging and monitoringSecurity controlsRisk evaluationAutomation platforms securityAI-adjacent workflow securityMCP integration securityCloud platformsEnterprise identity systemsAudit loggingEncryptionAccess controlData retentionIncident responseTechnical risk translationAIDatabricksSSOSaaSCommunicationCloud Security

About this role

Databricks is a leading data and AI company that is hiring a Staff Enterprise Security Engineer to enhance security coverage in a rapidly evolving enterprise environment. This role focuses on securing applications, integrations, and data flows while collaborating with various stakeholders to identify risks and improve security outcomes.

Responsibilities:

Strengthen security practices across enterprise application and integration reviews by identifying key risks early, improving requirement quality, and helping teams address security issues earlier in the lifecycle
Strengthen Enterprise Security’s capability to assess and guide AI-adjacent security, MCP and integration security, and cross-system data flow risk, while improving the consistency and scale of security reviews

Requirements:

8+ years of experience in security engineering, enterprise security, application security, cloud security, or a related field
Experience conducting security design or architecture reviews for enterprise applications, SaaS platforms, integrations, or internally developed systems
Strong understanding of authentication, authorization, SSO, federation, SCIM, API security, token handling, secrets management, and least privilege design
Experience assessing data flows, third-party integrations, trust boundaries, logging and monitoring, and security controls across interconnected systems
Ability to evaluate risk in modern enterprise environments, including automation platforms, AI-adjacent workflows, and emerging integration patterns such as MCP
Strong written and verbal communication skills, including the ability to translate technical risk into clear requirements and actionable guidance
Experience driving security outcomes through engineering judgment, influence, and scalable process improvement
Familiarity with cloud platforms, enterprise identity systems, and core control domains such as audit logging, encryption, access control, data retention, and incident response