← All roles

Sr. Manager, Security — Continuous Monitoring v 2.0

Databricks
Apply on company site
Hybrid (Remote - California)$228.6k - $314.3kfull-timePosted 4w ago

About the role

Senior engineering management role leading the Continuous Monitoring (ConMon) team at Databricks, responsible for building and operating the engineering infrastructure that continuously measures and reports on security control posture across cloud, identity, SaaS, and enterprise systems to support auditors and leadership.

Responsibilities

  • - Hire and develop Security Software Engineers; provide career development and build technical leadership within the team.
  • - Set and enforce engineering quality standards, including code reviews, reliability, observability, and useful documentation across audit cycles.
  • - Build a team with GRC domain knowledge and software engineering discipline.
  • - Own strategy and roadmap for continuous monitoring: cloud-scale control state collection, posture assessment, tooling integration, and remediation tracking.
  • - Define program measurements (control coverage, automation, audit burden) and ensure coverage keeps pace with business changes.
  • - Reduce manual evidence collection; target automated control coverage and timely remediation.
  • - Ensure accuracy of outputs (false positive rates) so control owners act without re-verification.
  • - Own security posture dashboards, metrics, and executive reporting; define and present control gaps and remediation effort to leadership.
  • - Establish strong cross-functional partnerships with GRC, IT, Legal, and Engineering; align monitoring with policy and audits.
  • - Lead build-vs.-buy decisions for security posture tooling; manage operating costs and scale.
  • - Translate changes in architecture and regulatory obligations into roadmap decisions.

Qualifications

  • - 2+ years of prior management experience leading Engineering or Security engineering teams.
  • - Typically 12+ years of experience, or an advanced degree plus 8+ years, preferably in security engineering, security posture monitoring, or compliance automation.
  • - Technical depth to review Python automation and assess monitoring architectures.
  • - Understanding of security controls and where they fail (identity, configuration management, logging, vulnerability management, data protection).
  • - Cloud security knowledge across AWS/Azure/GCP (IAM, audit logging, CSPM concepts, cloud-native security services).
  • - Working knowledge of compliance frameworks (SOC 2, ISO 27001, FedRAMP, or equivalent).
  • - Experience building security posture monitoring or compliance automation at scale, preferably including Databricks.
  • - Ability to drive efficiencies, set OKRs/KPIs, and make priority decisions on resourcing.
  • - Strong communication across technical, GRC, and executive audiences.

Skills

Required:Security software engineeringPythonCloud security (AWS/Azure/GCP)Compliance frameworks (SOC 2, ISO 27001, FedRAMP)
Nice to have:GRC tooling / automation platforms
Last updated Sep 24, 2026. Interested? Apply on the company site.

About Databricks

Leading Data and AI Platform for Enterprises

Databricks offers a unified platform for data, analytics and AI. Build better AI with a data-centric approach. Simplify ETL, data warehousing, governance and AI on the Data Intelligence Platform.

AIanalyticsbig datadatadata warehousingenterprise-infrastructuregovernanceliquid-ai-recruiting-target
Company profileWebsite

More open roles at Databricks