远程工作雷达

资深安全软件工程师,代理安全工程

Staff Security Software Engineer, Agentic Security Engineering

AI开发工程全球可投
公司Databricks
薪资未公开
工作地点Remote - California
地域资格全球可投
时区要求无特别要求
用工类型未标注
发布时间2025-06-06
数据来源Greenhouse
前往企业招聘页投递 →
全球可投:该职位未限制候选人所在地区。仍需注意薪资可能按地区折算,以及实际签约方式(正式雇佣 / 独立合同)。

RDQ226R605

此职位可在美国任何地点远程办公。

关于 Databricks

Databricks 是数据和 AI 公司。全球超过 12,000 家组织——包括 Comcast、Condé Nast、Grammarly 以及超过 50% 的财富 500 强企业——依赖 Databricks 数据智能平台统一和普及数据、分析和 AI。Databricks 总部位于旧金山,全球多地设有办公室,由 Lakehouse、Apache Spark™、Delta Lake 和 MLflow 的原始创建者创立。

关于团队

Agentic Security Engineering 团队是一个横向的、共享服务工程团队,使 Databricks 的所有安全功能都具备 AI 原生特性——构建 AI 代理、"角色"和共享平台,让组织内的安全团队(检测与响应、威胁情报、漏洞与产品安全、红队、GRC 和持续监控)能够以机器速度安全可靠地运作。

我们利用 AI 改变安全工作的方式。

职位描述

作为高级安全软件工程师,你将负责一个主要的技术工作流,设计并交付生产级 AI 代理及支撑它们的平台能力,可靠性、可观测性和默认安全作为首要要求。

你将设定代理构建和运行的标准,并与合作伙伴安全团队共同构建。你将推动的示例用例包括大规模 AI 威胁检测(警报分类和误报减少、全规模异常检测),扩展到威胁狩猎、漏洞管理、产品安全、红队/进攻性测试和 GRC/保证用例。

你将产生的影响

Agentic Security Engineering 架构

  • 设计、交付并运营安全团队依赖的生产级 AI 代理/角色,从大规模 AI 威胁检测开始。
  • 构建并加固共享平台,使任何安全团队都能安全可靠地交付代理——即沙盒、作用域最小权限身份、可观测性和可重用的代理/工具目录。
  • 建立工程标准,将可靠性作为首要任务——设计评审标准、延迟/成本优化、监控、干净的基于 CI 的部署和安全模型升级。
  • 建立 AI 质量和评估实践:评估框架、LLM 作为评判者(带偏见控制)和回归门禁,在生产前捕捉质量下降。

大规模 AI 威胁检测

  • 主导 AI 平台能力的设计和开发,以操作化的方式实现大规模 AI 威胁检测。
查看英文原文

RDQ226R605

This role can be based remotely anywhere in the United States.

About Databricks

Databricks is the data and AI company. More than 12,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow.

About the Team

The Agentic Security Engineering team is a horizontal, shared services engineering team that makes every Databricks security function AI-native — building the AI agents, "personas," and shared platform that security teams across the org (Detection & Response, Threat Intelligence, Vulnerability & Product Security, Red Team, GRC, and Continuous Monitoring) build on to operate at machine speed, safely and reliably.

We leverage AI to transform how security is done.

The Role

As Staff Security Software Engineer, you own a major technical workstream designing and shipping production-grade AI agents and the platform capabilities that power them, with reliability, observability, and safe-by-default security as first-class requirements.

You set the standards for how agents are built and operated and co-build with partner security teams. Example use cases you'll enable, led by AI threat detection at scale (alert triage and false-positive reduction, fleet-scale anomaly detection), extend to threat hunting, vulnerability management, product security, red team/offensive testing, and GRC/assurance use cases.

The Impact You Will Have

Agentic Security Engineering Architecture

  • Design, ship, and operate production AI agents/personas that security teams depend on, starting with AI threat detection at scale.
  • Build and harden the shared platform so any security team can ship agents safely and reliably — i.e., sandboxing, scoped least-privilege identity, observability, and a reusable agent/tool catalog.
  • Set engineering standards and make reliability first-class — design review bar, latency/cost optimization, monitoring, clean CI-based deploys, and safe model upgrades.
  • Establish AI quality and evaluation practices: eval frameworks, LLM-as-judge (with bias controls), and regression gates that catch quality drops before production.

AI Threat Detection at Scale

  • Lead the design and development of AI platform capabilities that operate at production scale — behavioral analysis of usage, detection of prompt injection attempts, and anomaly detection on agentic workflow behavior.
  • Define the methodology for AI security assessment: how Databricks systematically evaluates new AI capabilities against a comprehensive threat model before deployment and monitors them continuously after.
  • Drive technical strategy for AI red-teaming tooling: automated adversarial testing platforms that simulate how real attackers attempt to abuse Databricks' AI systems.

Cross-Organizational Technical Leadership & Mentorship

  • Co-build with and enable partner teams across the security org, and mentor mid-level engineers.
  • Lead design reviews, define team engineering practices, and drive continuous improvement in the quality and reliability of AI security tooling.

What We Look For

  • Demonstrated experience building, shipping, and operating production AI agents that others depend on, with an intentional pivot to AI-native transformation of a function at scale (prototypes and demos don't count).
  • Expert-level Python for production systems at scale.
  • Depth across the production-AI dimensions: agent architecture & orchestration; context & memory management; production operations (latency, cost, caching, monitoring, model upgrades, reliability); and AI quality & evaluation (eval frameworks, LLM-as-judge, regression testing).
  • Hands-on experience with modern agentic frameworks and LLM tooling (e.g., LangChain, Hugging Face, frontier models) and MCP-style tool integration.
  • Strong technical communicator who aligns partners and drives adoption without direct authority.
  • 7+ years in software or security engineering, with demonstrated technical leadership on a significant workstream.
  • Track record of shipping high-quality security tooling that other teams depend on in production.

Nice to Have

  • Research contributions or deep familiarity with adversarial ML, AI safety, or AI red-teaming methodology.
  • Experience with MLOps platforms, AI serving infrastructure, or AI platform security at cloud scale.
  • Familiarity with AI governance standards (NIST AI RMF, ISO/IEC 42001, EU AI Act technical provisions) as they apply to security engineering.
  • Open-source contributions or publications in AI security, adversarial ML, or security tooling.

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected base salary range for non-commissionable roles or on-target earnings for commissionable roles.  Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipated utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.

Zone 1 Pay Range
$289,200—$397,650 USD

Zone 2 Pay Range
$260,300—$357,950 USD

Zone 3 Pay Range
$245,800—$338,050 USD

Zone 4 Pay Range
$231,400—$318,100 USD

About Databricks

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.

Benefits

At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.

Our Commitment to Diversity and Inclusion

At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance

If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

本页面信息整理自 Greenhouse,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

← 返回全部职位