All remote jobs

Staff Security Assurance Engineer

AI Summary
Databricks is seeking a senior security program leader to deliver security certifications, federal authorizations, and compliance initiatives in a cloud-native environment. The role owns end-to-end execution, including milestones, dependencies, risk mitigation, decision-making, and executive status reporting. It requires deep familiarity with frameworks such as FedRAMP, DoD IL5/IL6, NIST 800-53, CMMC, PCI, and HIPAA, along with extensive cross-functional influence. Candidates must hold an active Top Secret clearance, be able to work in a SCIF, and live in or relocate to the Washington, DC metropolitan area. This is a high-impact role supporting regulated and government-market expansion.
Remote from
USA
Salary
Undisclosed
Employment
Full Time
Experience
Director
Published
Apply before
9 Dec 2026
Listing views
17
Application actions
2
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

About this role.

P-1528

As a Staff Security Assurance Engineer within the Security Assurance Team, you will help lead high-visibility security compliance implementation initiatives. Reporting directly to the Senior Director, you will serve as a strategic catalyst for these programs, ensuring seamless execution and alignment with Databricks’ global security objectives.
You will navigate a complex, cloud-native landscape, collaborating with Security, IT, Engineering, Internal Audit, Corporate Operations, and other teams, to assure successful completion of highly cross-functional projects that enable the growth of our business and safeguard our customers.

This role requires an active Top Secret Clearance, the ability to access and work within a SCIF environment, and residence within the Washington, DC metropolitan area.

The impact you will have:

  • Drive Project Outcomes: Adopt an ownership mindset to manage the end-to-end delivery of work required for new security certifications, federal authorizations, and compliance initiatives that expand Databricks’ reach across regulated and government markets.
  • Accelerate Execution: Act as a force multiplier by proactively identifying and neutralizing project blockers, reducing friction, and maintaining high velocity in a cloud-native environment.
  • Orchestrate Cross-Functional Decision Making: Navigate complex technical and compliance trade-offs, driving consensus across Engineering, IT, Product, and Security teams to reach timely resolutions.
  • Optimize Delivery Methodologies: Continuously refine project frameworks to maximize effectiveness, ensuring that security initiatives are both rigorous and agile.
  • Precision Program Management: Masterfully oversee project lifecycles—including milestones, dependencies, and risk mitigation—while providing executive-level transparency through accurate status reporting.
  • Build Strategic Partnerships: Forge deep, collaborative relationships with Security Assurance Team subject matter experts and technical stakeholders to ensure seamless alignment on security goals.

What we look for:
We are looking for a professional with the following skills and practical experience in:

  • Active Top Secret (TS) Clearance with the ability to access and work within a SCIF environment.
  • Location Requirement: Must be located in, or willing to relocate to, the Washington, DC metropolitan area.
  • Proven Expertise: 7+ years of experience (with Bachelor’s degree or 5+ years with advanced degree) in security and technical program/project management. Ideally, at a fast-paced, cloud-native organization.
  • Strategic Ownership: Demonstrated success in leading high-stakes security compliance initiatives (e.g., FedRAMP, DoD IL5/IL6, NIST 800-53, CMMC, PCI, HIPAA) from inception to authorization or market.
  • Complexity Management: Experience navigating projects with intricate technical dependencies, multiple stakeholders, and competing constraints with geo-distributed teams.
  • Executive Presence: Ability to influence and communicate effectively across the spectrum, from deep-dive technical discussions with engineers to high-level briefings for senior leadership and government stakeholders.
  • Agility & Continuous Learning: A proven track record of rapidly mastering new processes, methodologies, technologies, and security frameworks to meet evolving business needs.
  • Communication Excellence: Superb verbal and written skills, with a knack for translating complex project data into clear, actionable insights and documentation.
  • Educational Foundation: Bachelor’s degree in Computer Science, Information Systems, or a related technical field (or equivalent practical experience).
  • Federal Experience Preferred: Experience supporting U.S. Government, Defense, Intelligence Community, or other highly regulated environments is strongly preferred.

About Databricks

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn, X, YouTube, and Instagram.

Benefits

At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.

Our Commitment to Diversity and Inclusion

At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance

If access to export-controlled technology or source code is required for performance of job duties, it is within Employer’s discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

5/5
EasyHard

Pace & Pressure

5/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

5/5
IndependentCollaborative
AI insightThe position combines staff-level technical program leadership, complex federal compliance requirements, and high-stakes delivery across many technical and executive stakeholders. Active TS clearance and SCIF access further narrow the candidate pool and indicate sensitive, operationally demanding work.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate
$205,000
US market range (per year)$180k–$235k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer salary was disclosed. Estimated US annual base-pay range for a Staff Security Assurance Engineer with federal compliance expertise, active TS clearance, and Washington, DC market requirements is $180,000–$235,000, with an estimated midpoint of $205,000 per year.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
Describe a security authorization or compliance program you led from initial planning through approval.

I would explain the authorization scope, the control framework used, and how I converted requirements into a delivery plan with accountable owners, milestones, evidence expectations, and risk tracking. I would quantify the outcome, such as achieving authorization on schedule or reducing outstanding control gaps.

How do you remove blockers in a large security compliance initiative involving Engineering, IT, Security, and Audit?

I first identify whether the blocker is a decision, dependency, resource, or technical-risk issue. I then document its impact, bring the correct decision-makers together with clear options, assign an owner and deadline, and track closure through a visible program cadence.

How would you manage competing requirements between a federal security framework and product delivery timelines?

I would assess the compliance and business risk, distinguish mandatory controls from implementation choices, and work with technical owners to find secure phased solutions. I would escalate trade-offs with a concise recommendation, evidence, and the impact of each option so leadership can make a timely decision.

What metrics would you use to report the health of a security assurance program to executives?

I would report authorization readiness, control implementation status, evidence completion, critical risks, milestone health, dependency status, remediation aging, and decisions needed from leadership. The report would focus on trends, material delivery risks, and actions required rather than raw task volume.

How have you communicated complex security requirements to non-security stakeholders?

I tailor the message to the audience by connecting requirements to customer trust, market access, delivery risk, and operational impact. For technical teams, I provide actionable control interpretations and acceptance criteria; for executives, I provide concise risk, cost, timeline, and decision summaries.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Add alert
Jobs Talent AI Tools Salaries
Menu