Sr. Manager, Security - Detection Engineering

RDQ225R418

The Detection & Response team's mission is to protect Databricks products, cloud infrastructure, endpoints and employees from security threats and modern attacks. We are a team of expert engineers combining log analysis expertise, cybersecurity skills and software development to build a mature and durable detection platform. We embrace “Detection-as-Code” model by doing “Security for Databricks on Databricks”, using our own platform to build alerts and detections.

Databricks is looking for a Senior Manager leading the Detection Engineering team to build durable and high-fidelity detections against common attacks and across a variety of different log sources and domains, including endpoint, networking, cloud and identity data. The job requires expertise in building robust engineering solutions and pipelines to perform data ingestion, curation and correlation and fully embracing Detection-as-Code principles and models. 

As leader of the Detection team, you’ll be responsible for managing and expanding the team; set a clear vision, priority and strategy; advocate for resources while managing budget and costs; establish productive relationships and solid partnership across the company with leaders in other organizations such as Engineering, Legal, IT.

The impact you will have:

• Hire great Security Software Engineers to build an outstanding team
• Support Security Software Engineers in their career development by providing clear feedback and developing security leaders
• Solve Detection Engineering challenges starting with the ingestion of large volumes of data across multiple clouds and complex systems and ending with precise detectors running in production 
• Innovate, study and research evolution of threat landscape and most recent adversarial techniques in order to strategize the most effective detection engineering plan, partnering with Product Security and Redteam teams
• Coordinate execution and collaborate across teams to unblock cross-cutting projects

What we look for:

• 2-4 years of prior management experience of Engineering or Security teams
• Typically 12+ years of experience or advanced degree + 8 years of experience (preferably focused on detection, incident response, and/or threat intelligence).
• Focused on defining and driving efficiencies and improvements within their team
• Make effective priority decisions on resourcing and alignment within their team
• Accountable for defining and achieving targets (e.g. OKRs, KPIs) of the team
• Sufficient domain expertise to review the work of their team
• Previous experience in building complex Detection Engineering on large data platforms with attention to accuracy, quality and cost tradeoffs (experience with Databricks is preferred)
• Solid understanding of cybersecurity fundamentals with technical expertise on common threats and attacks observed on endpoints, cloud, network and identity
• Knowledge of Machine Learning methods applied to solve Detection Engineering problems