Sr. AI Threat Researcher

Sophos

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.   Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats.   Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, giving organizations the flexibility to choose trusted relationships when securing their business. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com. Role Summary We are seeking a Sr. Director of Engineering to lead our X-Ops Platform organization. The leader will be responsible for all aspects of the platform ranging from vision, strategy and roadmap to product delivery and service execution.  The leader will coordinate with stakeholders to align business priorities and support engineering teams in delivering secure, high-quality software at scale using modern AI technologies. You will set strategy and standards for how we build, run, and improve our platforms and operational tooling across the engineering lifecycle - partnering closely with Product, Security, IT, and Engineering leaders. Success in this role looks like improved developer productivity, strong service reliability and resilience, clear operational governance, and efficiency in cloud and platform spend and close alignment with Sophos X-Ops goals. You bring enough technical depth to challenge and support senior engineers and architects, while spending most of your time enabling teams, aligning stakeholders, and ensuring execution against clear outcomes. You will have a strong grounding in Cyber Security, Cloud Computing and AI frameworks and development practices. You will lead and grow multiple teams and managers, fostering strong engineering practices and a culture of ownership. You will collaborate with senior stakeholders across Engineering, Product, Security, IT, and Finance to ensure platform roadmaps and operational priorities support company goals. This role is based in Abingdon UK with remote working and teams also in India and Hungary. Periodic in-person leadership and team collaboration and travel are needed.

Databricks

RDQ326R15 The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing "Security for Databricks on Databricks", using our own platform to create near-real-time log analytics, alerting and forensics. You will be an individual contributor on the security Incident Response (IR) team at Databricks, reporting to the regional IR manager. You will be responsible for conducting security analysis and forensics, responding to high-priority alerts and contributing to automations and agentic capabilities. You will be a security multiplier and help the team scale security incident response at Databricks. The impact you will have: * You will respond to incidents as part of a distributed 24x7 operations and on-call schedule. * You will triage and respond to security events and alerts, ensuring quick and effective containment. * You will contribute to security investigations, conducting analysis and forensics across a range of data sources to determine the timeline and impact of security events. * You will build automations, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team. * You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews. What we look for: * Bachelor's Degree AND 4+ years experience in Incident Response work OR Master's Degree AND 2+ years experience. * Strong cloud security background in at least 1 of AWS, GCP or Azure, and working knowledge of the others. * Knowledge of AI/LLM and agentic capabilities, including effective prompting and use of MCP, agents and agent skills. Prefer experience with building and operating agentic systems in a security setting. * Broad security subject matter expertise. * Expertise in few core IR skills (DFIR , Reverse Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, etc.). * Experience with Enterprise Security and SaaS applications. * Working knowledge of a SIEM and SOAR. * Experience building Incident Response Tooling and scripting language skills.   About Databricks Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook. Benefits At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here. Our Commitment to Diversity and Inclusion At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics. Compliance If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Databricks

P-1388 As a Sr. Manager of the Data & AI Support Engineering team, you will lead and manage a team of Technical Solutions Engineers responsible for driving deep technical resolutions for complex customer issues across Spark, AI/ML, Streaming, and Lakehouse platforms. You will help customers realize business value from Databricks Ecosystem products through strong technical leadership, AI-first operational innovation and customer-centric execution. Mission Lead and scale a world-class AI-first Data & AI Support Engineering organization that combines deep technical expertise, operational excellence, intelligent automation and customer-centric support to accelerate issue resolution, improve platform reliability and drive exceptional customer outcomes across enterprise-scale Data and AI workloads. * Build AI-enabled support workflows and reusable automations to improve resolution speed and support quality. * Use Agentic AI systems, logs, telemetry, observability platforms and internal systems to accelerate troubleshooting and root-cause analysis safely. * Create reusable runbooks, prompts, and agentic workflows that scale operational efficiency across teams. * Ensure strong AI governance, customer data safety, validation practices, auditability, and human-in-the-loop controls. * Partner with Engineering and Product teams to drive AI-first support innovation and operational excellence. OUTCOMES * Drive AI-first support transformation initiatives that improve resolution speed, case quality, operational efficiency and customer experience. * Partner with Engineering and Product teams to operationalize AI-assisted diagnostics, observability insights, and intelligent escalation management for enterprise customers. * Build and scale reusable AI-enabled workflows, automations, runbooks, and operational intelligence frameworks across the support organization. * Lead and manage Technical Solutions Engineers, Team Leads, and support operations personnel across AMER support functions based out of the Dallas location. * Own and improve operational KPIs including customer satisfaction, escalation management, backlog health, resolution efficiency, and support quality. * Act as a senior escalation point for customers and internal teams while driving operational excellence and process optimization. * Lead hiring, onboarding, mentoring, technical assessments, training, and career development for support engineers and technical leads. * Conduct regular one-on-ones, annual review, and career development discussions with direct reports. * Be a hands-on technical leader supporting complex issues related to Spark Core, Spark SQL, Structured Streaming, Delta Lake, Lakehouse architecture, and Databricks Runtime technologies. * Guide customers on Spark runtime optimization, distributed systems performance, and best practices for scalable Data & AI workloads. * Own Engineering JIRA escalations and proactively drive faster resolutions for customer-reported product issues. * Maintain internal operational documentation, runbooks, and customer-facing knowledge base assets. * Coordinate closely with Engineering and Backline Support engineering, customer experience intelligence teams to identify, reproduce, and report product defects effectively. * Act as a strong customer advocate and collaborate with cloud partners to support mutual customer success. * Participate in major incident management, escalation handling, on-call rotations, and critical production support activities. WHAT WE ARE LOOKING FOR: * 10+ years of experience designing, building, troubleshooting, and supporting large-scale Data & AI applications using Python, Java, Scala, Spark, or related distributed technologies. * Strong work experience of AI-enabled support workflows, agentic AI systems, Claude Skills workflows, RAG architectures, vector databases and any other operational automation frameworks. * Proven development/delivery experience at a production scale in Databricks tech stacks like Model serving, Lakehouse, Delta, DLT, Lakeflow, Lakebase platforms is a strong plus. * Experience using AI tools for troubleshooting, root-cause analysis, observability analysis, and support workflow acceleration. * Strong hands-on expertise in Apache Spark, Spark SQL, Structured Streaming, Delta Lake, and distributed data processing systems. * Experience leading production-scale workloads across Big Data, Hadoop, AI/ML, Kafka, Streaming, Data Science, or Analytics platforms. * Strong troubleshooting and performance tuning experience for Spark and JVM-based distributed systems, including memory management, garbage collection, heap analysis, and thread dump analysis. * Hands-on experience with AWS, Azure, or GCP cloud platforms. * Proven experience managing globally distributed technical teams and handling high-severity customer escalations. * Strong analytical, debugging, problem-solving, and distributed systems troubleshooting skills. * Excellent written and verbal communication skills with strong customer-facing leadership abilities. * Strong organizational, multitasking, stakeholder management, and operational leadership capabilities.   About Databricks Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook. Benefits At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here. Our Commitment to Diversity and Inclusion At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics. Compliance If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.