Senior Security Engineer, Red Team

<p>RDQ326R18</p> <p>The Red Team is committed to proactively identifying and mitigating security threats across our infrastructure, applications, and cloud environments. Through rigorous offensive security assessments, adversarial testing, and vulnerability research, we aim to uncover and address weaknesses before they can be exploited by real-world attackers. By simulating real-world attack scenarios, we help enhance our security posture, ensuring resilience against emerging threats and fostering a culture of security awareness throughout the organization.</p> <h3><strong>The Impact You Will Have:</strong></h3> <p>You will be a key member of the Red Team at Databricks, conducting security assessments, developing novel attack techniques, and working across teams to improve our defensive capabilities. Your work will involve:</p> <ul> <li><strong>Conducting Red Team operations</strong> on cloud environments, infrastructure, and applications to identify and exploit security weaknesses in both development and production environments.</li> <li><strong>Developing and refining tools, exploits, and automation</strong> to simulate real-world adversarial techniques against enterprise security controls.</li> <li><strong>Performing vulnerability research and exploit development,</strong> including discovering zero-days, bypassing security controls, and creating proof-of-concept exploits.</li> <li><strong>Assessing cloud security risks</strong> across AWS, Azure, and GCP environments, including IAM misconfigurations, container security, and lateral movement strategies.</li> <li><strong>Collaborating with internal security and engineering teams</strong> to provide remediation guidance, enhance security monitoring, and improve detection and response capabilities.</li> <li><strong>Researching emerging threats</strong> in cloud security, web applications, and infrastructure, sharing findings internally and contributing to the broader security community.</li> <li><strong>Performing security design reviews</strong> to ensure new products and infrastructure components are built with security best practices from inception.</li> </ul> <h3><strong>What We Look For:</strong></h3> <p>The ideal candidate will have a strong background in offensive security, cloud security, and vulnerability research.</p> <ul> <li>Expertise in Red Teaming, penetration testing, and adversary simulation techniques.</li> <li>Deep knowledge of cloud security (AWS, Azure, GCP), including IAM, networking, containers, orchestration (kubernetes) and serverless architectures.</li> <li>Strong programming skills in Python, C/C++, or Go for exploit development, automation, and tool creation.</li> <li>Experience developing and weaponizing exploits for vulnerabilities in cloud environments, applications, and infrastructure.</li> <li>Strong understanding of modern attack techniques, including phishing, persistence mechanisms, privilege escalation, and lateral movement.</li> <li>Knowledge of security tooling (e.g., C2 frameworks, EDR evasion, malware development, fuzzing, and reverse engineering).</li> <li>Excellent problem-solving skills and the ability to think like an adversary.</li> <li>Strong communication skills<strong>,</strong> with the ability to document findings clearly and present them to technical and non-technical audiences.</li> <li>Typically 4+ years of experience in offensive security<strong>,</strong> vulnerability research, or Red Teaming, or an advanced degree (MS/PhD) with 3+ years of experience in the security domain.</li> <li>BS or higher in Computer Science, Cybersecurity, or a related field.</li> </ul> <p>If you're passionate about offensive security and enjoy breaking things to make them better, we'd love to hear from you!</p><p><strong>About Databricks</strong></p> <p><span>Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on <span><a href="https://twitter.com/databricks" target="_blank">Twitter</a>, <a href="https://www.linkedin.com/company/databricks" target="_blank">LinkedIn</a> <span>and</span> <a href="https://www.facebook.com/databricksinc" target="_blank">Facebook</a></span>.<br/><br/><strong>Benefits<br/><br/></strong></span>At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region, please visit <a href="https://www.mybenefitsnow.com/databricks">https://www.mybenefitsnow.com/databricks</a>. <br/><br/></p> <p><strong>Our Commitment to Diversity and Inclusion</strong></p> <p>At Databricks, we are committed to fostering