Sr. Manager, Security — Continuous Monitoring v 2.0

The role

You will lead the Continuous Monitoring team to build and operate engineering infrastructure that measures security control posture. The role involves managing engineers who write Python automation and operate data pipelines to assess security controls across cloud, SaaS, and identity systems.

What you will do

• Hire and develop Security Software Engineers
• Set engineering quality standards for code review and automation pipelines
• Own the strategy and roadmap for the continuous monitoring platform
• Ensure control coverage keeps pace with new cloud environments and products
• Reduce manual evidence collection through automation
• Own security posture dashboards, metrics, and reporting
• Present findings to senior leadership regarding control gaps and risk
• Establish partnerships with GRC, IT, Legal, and Engineering
• Lead build-vs-buy evaluations for security tooling
• Manage team resourcing and achieve OKRs and KPIs

Required qualifications

• 2+ years of prior management experience leading Engineering or Security engineering teams
• 12+ years of experience, or an advanced degree plus 8 years, focused on security engineering, security posture monitoring, or compliance automation
• Technical depth to review Python automation and integration architecture
• Understanding of security controls including identity, configuration management, logging, vulnerability management, and data protection
• Cloud security knowledge across at least one major platform (AWS, Azure, GCP)
• Working knowledge of compliance frameworks (SOC 2, ISO 27001, FedRAMP, or equivalent)
• Experience building security posture monitoring or compliance automation at scale
• Ability to define and drive efficiencies and improvements within the team
• Ability to make effective priority decisions on resourcing and alignment

Nice to have

• Experience with Databricks
• Experience with cloud security posture management (CSPM/SSPM) platforms at an architecture level
• Experience with FedRAMP continuous monitoring programs at a leadership level
• Hands-on background with GRC automation platforms (Vanta, Drata, ServiceNow GRC, Archer, or equivalent)
• Experience building automated monitoring for AI system controls and AI governance frameworks
• Track record of building or scaling a security measurement or compliance engineering function
• Background in security operations, detection engineering, or security architecture
• Experience with front-end development
• CISSP, CISM, CISA, or equivalent certifications

Benefits

• Annual performance bonus
• Equity

About the company

Databricks is the data and AI company. More than 20,000 organizations worldwide rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents.