2 months ago
Manila, PhilippinesSenior
Responsibilities
- Design, implement, and govern Databricks security architecture, including Unity Catalog, workspace configurations, and cluster policies.
- Lead Unity Catalog access control, data lineage, row- and column-level security, and attribute-based access control implementation.
- Manage workspace network security, Private Link, VPC peering, IP allowlisting, secrets management, and init script security reviews.
- Implement and monitor audit logging for threat detection and compliance reporting.
- Govern service principal and PAT lifecycle management and enforce OAuth 2.0/OIDC authentication integration.
- Embed security reviews into data pipeline and notebook development workflows with data engineering and ML teams.
- Implement Lakehouse data classification, Delta Lake encryption, masking, and DLP policies.
- Drive compliance alignment, maintain security baselines and hardening standards, and develop configuration-as-code templates.
- Assess ML models and pipelines for adversarial risks, data poisoning, and model exfiltration threats.
- Advise on Databricks upgrades, feature adoption, and emerging risks as the internal security subject matter expert.
- Support internal and third-party audits and remediate data platform control findings.
Requirements
- At least 5 years of information security experience, including at least 3 years focused on big data or cloud data platform security.
- Hands-on Databricks administration and security expertise with Unity Catalog, cluster policies, workspace management, and secrets.
- Experience securing Databricks on Azure, including ADLS Gen2, Azure AD integration, and VNet injection, or on AWS, including S3, IAM roles, and VPC.
- Proficiency in PySpark, Python, and SQL for data security tooling, audit analysis, and access control implementation.
- Strong understanding of data governance frameworks in regulated financial services environments.
- Knowledge of PCI-DSS, SOX, GDPR, CCPA, and BCBS 239 compliance standards.
- Familiarity with MLOps security concepts and model lifecycle management risks.
- Preferred: Databricks Certified Associate Developer or Platform Administrator certification; Databricks Certified Data Engineer — Professional certification; CISSP, CISM, CCSP, or CDPSE certification.
- Preferred: experience with Delta Sharing security, cross-organizational data sharing governance, model risk management such as SR 11-7/SS1/23, AI/ML governance frameworks, Apache Atlas, Apache Ranger, or comparable open-source data governance tools.
Benefits
- Offers are contingent on successfully passing a credit check, criminal background check, pre-employment medical screening, and drug screening.
- Axos is an Equal Opportunity employer and provides reasonable accommodations for individuals with disabilities.
