Senior Manager, Product Security

Databricks Databricks · Data AI · Amsterdam, Netherlands · Security

Lead a team focused on embedding security into Databricks' core platforms, including compute, identity, data plane, control plane, Kubernetes infrastructure, and developer frameworks. The role involves shaping company-wide security architecture, driving "secure-by-default" platforms, opinionated frameworks, and systemic guardrails, and partnering with engineering teams to make the secure path the easiest path. The goal is to eliminate entire classes of security risk through scalable design and set technical direction to empower engineers to build secure systems at massive scale.

What you'd actually do

  1. Lead a team dedicated to embedding security into Databricks’ core platforms — including compute, identity, data plane, control plane, Kubernetes infrastructure, and developer frameworks.
  2. Shape company-wide security architecture by driving “secure-by-default” platforms, opinionated frameworks, and systemic guardrails.
  3. Partner closely with engineering teams to make the secure path the easiest path.
  4. Eliminate entire classes of security risk through scalable design, not manual reviews or ticket triage.
  5. Set technical direction and empower engineers to build secure systems at massive scale.

Skills

Required

  • Deep technical background in distributed systems, cloud, or platform security.
  • Proven experience securing large-scale, multi-tenant architectures.
  • Strong grasp of identity, authorization, isolation, and cryptographic trust boundaries.
  • Comfortable influencing principal engineers and product roadmaps.
  • Demonstrated success leading technically senior engineers with high autonomy.
  • A mindset that focuses on failure chains, not just individual vulnerabilities.

Nice to have

  • Passion for building security solutions that are scalable, elegant, and frictionless for developers.

What the JD emphasized

  • security architecture
  • systemic guardrails
  • scalable design
  • secure systems at massive scale
  • secure platforms
  • reusable security frameworks
  • Reduce systemic risks
  • Scale security leadership
  • enable security frameworks to be adopted by default
  • eliminate recurring vulnerability classes
  • permanently reduce at least one major systemic risk