Staff Product Security Engineer

Overview

Databricks is seeking a Staff Product Security Engineer to join our Security organization in Amsterdam, Netherlands. You will help build and scale secure data platforms by shaping the product security strategy, performing threat modeling, and guiding secure software practices across the product lifecycle.

Responsibilities

• Lead security reviews of product features and architectural designs.
• Design, implement, and maintain security controls across cloud and on-prem environments.
• Conduct threat modeling, risk assessment, and security testing (SAST/DAST, penetration testing).
• Collaborate with product, engineering, and SRE teams to reduce risk and improve security posture.
• Mentor and coach engineers on secure coding practices and security awareness.
• Respond to incidents and participate in post-incident reviews.

Requirements

• 8+ years of experience in product security or security engineering.
• Strong knowledge of secure software development lifecycle and threat modeling.
• Proficiency in at least one programming language (e.g., Python, Go, Java, or similar).
• Experience with cloud security (AWS/Azure/GCP), IAM, encryption, and vulnerability management.
• Familiarity with incident response, security testing (SAST/DAST), and security tooling.
• Excellent communication and collaboration skills.
• Ability to work on-site in Amsterdam or at a Databricks office location.

Nice to have

• Certifications (CISSP, CSSLP, or equivalents).
• Experience with data privacy and compliance frameworks.

Benefits

• Competitive salary and equity package.
• Health, dental, and vision insurance; retirement plans.
• Generous paid time off and flexible work arrangements.
• Learning and development opportunities.

About Databricks

Databricks is on a mission to simplify and accelerate data-driven insights by unifying data analytics and AI. Join our team to help build secure, scalable data platforms used by thousands of companies worldwide.