Staff Security Software Engineer, AI Security

The shape of it

In the posting’s own words

As a Staff Security Software Engineer on the AI Security team, you are a senior technical leader who sets the standards for how Databricks secures its AI and ML capabilities. You combine deep offensive security expertise with practical knowledge of AI/ML systems to identify and drive resolution of the most significant security risks in Databricks' AI platform.

What it asks for · 10

• 7–10 years of combined experience in offensive security, AI/ML security research, or product security engineering, with demonstrated leadership in securing complex systems
• Subject matter expert in at least two of the following AI security domains:
• Demonstrated ability to design and execute adversarial attacks against production AI systems
• Deep understanding of AI/ML platform architecture- how models are trained, served, and integrated, and where the trust boundaries between components lie
• Expert in at least one major cloud platform (AWS, Azure, GCP) and its AI/ML security model
• Proficient in Python; able to read and analyze ML model code, training scripts, and API serving code; working knowledge of at least one additional language (Go, Java, Scala, Rust)
• Track record of driving cross-team AI security improvements and influencing product architecture decisions
• Experience building automated security tooling for AI systems
• Strong communicator- translates AI security risks into actionable guidance for engineers, product managers, and leadership
• Pragmatic approach to risk- distinguishes real-world exploitable AI risk from theoretical concerns

Also a plus

• Published research on AI/ML security topics or experience presenting at AI security venues (DEF CON AI Village, NeurIPS workshops, Black Hat)
• Experience with OWASP Top 10 for LLMs, MITRE ATLAS, or similar AI security frameworks
• Familiarity with MLflow, Unity Catalog, Delta Lake, or Databricks platform internals
• OSCP or equivalent offensive security certification
• Academic or research background in machine learning, adversarial ML, or AI safety

Tools and skills named

Words the posting leans on

• security48×
• model11×
• risks10×
• systems9×
• product8×
• ai/ml7×
• platform7×
• serving7×
• tooling7×
• adversarial6×
• build6×
• data6×
• design6×
• threat6×
• engineering5×
• identify5×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

More open at Databricks

• ソリューションアーキテクト (プリセールス)Tokyo, Japan
• デリバリーソリューションアーキテクトTokyo, Japan
• Account ExecutiveBengaluru, India; Mumbai, India
• Account Executive - FederalAustralian Capital Territory, Australia
• Account Executive, SingaporeSingapore
• Accounting ManagerSan Francisco, California