• The Lead Information Security Engineer is a senior cybersecurity leader responsible for protecting the organization’s digital ecosystem across product development, manufacturing, and enterprise IT systems. • This role ensures the security of connected medical/surgical devices, intellectual property, and regulated environments, while maintaining compliance with cybersecurity guidance, ISO standards, and global regulations. • This position plays a critical role in enabling secure product innovation, patient safety, and operational resilience across the device lifecycle. • Lead detection and response for incidents affecting: manufacturing systems (OT/ICS), connected medical/surgical devices, and enterprise IT environments • Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact • Investigate and respond to incidents involving intellectual property theft, disruptions and/or ransomware affecting production lines, and IT vulnerabilities

• Develop, maintain, and evolve enterprise data security and data loss prevention architectures aligned to business objectives, regulatory requirements, and data classification standards. • Champion the integration of datacentric security controls across endpoint, identity, collaboration, storage, and data platforms, ensuring secure by default and least privilege principles. • Design and operationalize Microsoft Purview Information Protection and DLP capabilities, including sensitivity labeling, classification, policy enforcement, and user experience considerations. • Architect and implement Microsoft Defender capabilities (Endpoint, Identity, Office 365, Cloud Apps) to protect data throughout its lifecycle. • Serve as a senior technical authority for data security and DLP across Windows, macOS, Windows Server, and Linux environments, ensuring consistent enforcement across heterogeneous platforms. • Integrate Microsoft Security capabilities with complementary platforms such as Varonis Data Security to provide comprehensive data protection. • Author and maintain data security and DLP standards, reference architectures, and technical guardrails aligned to NIST and internal security frameworks. • Convert business risks and regulatory obligations into technical requirements and traceable, measurable mitigation strategies. • Evaluate new platforms, tools, and vendors for strategic fit, security posture, and architectural impact. • Provide technical leadership, mentorship, and escalation support for complex data security and DLP challenges. • Communicate control posture, risks, and recommendations clearly to engineering, audit, and leadership stakeholders. • Continuously assess and improve data security posture through metrics, dashboards, and control validation. • Collaborate with PKI teams to manage certificate lifecycle operations, including issuance, renewal, revocation, and inventory. • Perform other duties as assigned.

• Define the architecture and technical strategy for Databricks' AI security tooling platform • Lead the design and development of AI platform capabilities • Serve as the technical authority on AI security engineering • Mentor senior and mid-level engineers

• As a Staff Security Software Engineer on the AI Security team, you are a senior technical leader who sets the standards for how Databricks secures its AI and ML capabilities. • You lead AI red team engagements against production AI systems, conduct security architecture reviews for complex, multi-system AI features, and build the tooling and frameworks that scale the team's impact. • You are a subject matter expert in at least two AI security domains and you operate with significant autonomy- driving cross-team remediation, setting technical standards, and mentoring teammates in both offensive techniques and secure AI design.