About This Job
As a Senior Databricks Security Engineer, you will be at the forefront of securing our enterprise data and AI platform. Our Databricks environment underpins critical financial analytics, risk modeling, and machine learning workloads. You will be responsible for designing and implementing a comprehensive security framework for Databricks on Azure and/or AWS — ensuring data confidentiality, integrity, and regulatory compliance across all layers of the Lakehouse platform.Key Responsibilities- Design, implement, and govern the Databricks security architecture including Unity Catalog, workspace configurations, and cluster policies
- Lead Unity Catalog implementation: fine-grained access control, data lineage, row/column-level security, and attribute-based access control (ABAC)
- Manage Databricks workspace security: network configurations (Private Link, VPC peering, IP allowlisting), secrets management, and init scripts security review
- Implement and monitor Databricks audit logging for threat detection and compliance reporting
- Govern service principal and PAT lifecycle management; enforce OAuth 2.0 / OIDC authentication integration
- Collaborate with data engineering and ML teams to embed security reviews into data pipeline and notebook development workflows
- Lead data classification and protection initiatives within the Lakehouse — implement Delta Lake encryption, masking, and DLP policies
- Drive compliance alignment for Databricks workloads
- Develop and maintain Databricks security baselines, hardening standards, and configuration-as-code templates
- Perform security assessments of ML models and pipelines for adversarial risks, data poisoning, and model exfiltration threats
- Act as the internal SME for Databricks security, advising on platform upgrades, feature adoption, and emerging risks
- Support third-party and internal security audits; produce evidence and remediate findings related to data platform controls
- 5+ years of information security experience, with 3+ years focused on big data or cloud data platform security
- Hands-on expertise with Databricks platform administration and security: Unity Catalog, cluster policies, workspace management, secrets
- Experience securing Databricks on Azure (ADLS Gen2, Azure AD integration, VNet injection) or AWS (S3, IAM roles, VPC)
- Proficiency in PySpark, Python, and SQL for data security tooling, audit analysis, and access control implementation
- Strong understanding of data governance frameworks and their application in regulated financial services environments
- Knowledge of relevant compliance standards such as PCI-DSS, SOX, GDPR, CCPA, BCBS 239
- Familiarity with MLOps security concepts and risks in model lifecycle management
- Databricks Certified Associate Developer or Platform Administrator certification
- Databricks Certified Data Engineer — Professional
- CISSP, CISM, CCSP, or CDPSE certification
- Experience with Delta Sharing security and cross-organizational data sharing governance
- Exposure to model risk management (SR 11-7 / SS1/23) and AI/ML governance frameworks
- Experience with Apache Atlas, Apache Ranger, or comparable open-source data governance tools
About Axos
Born digital-first, Axos delivers financial tools and services that allow individuals, small businesses, and companies to access and manage their money how, when, and where they want. We’re a diverse team of dynamic, insightful, and independent innovators who are excited to provide technology-driven solutions that offer unbeatable value to our customers.
Axos Financial is our holding company and is publicly traded on the New York Stock Exchange under the symbol "AX" (NYSE: AX).
Learn More about working at Axos Business Center
Pre-Employment Background Check, Medical, and Drug Test:
All offers are contingent upon the candidate successfully passing a credit check, criminal background check, and pre-employment medical and drug screening.
Equal Employment Opportunity:
Axos is an Equal Opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.
Job Functions and Work Environment:
While performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc.
The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.
Skills Required
- 5+ years of information security experience
- 3+ years focused on big data or cloud data platform security
- Hands-on Databricks administration and security experience, including Unity Catalog, cluster policies, workspace management, and secrets
- Experience securing Databricks on Azure or AWS
- Proficiency in PySpark, Python, and SQL
- Understanding of data governance frameworks in regulated financial services environments
- Knowledge of PCI-DSS, SOX, GDPR, CCPA, and BCBS 239
- Familiarity with MLOps security concepts and model lifecycle risks
- Databricks Certified Associate Developer or Platform Administrator certification
- Databricks Certified Data Engineer Professional certification
- CISSP, CISM, CCSP, or CDPSE certification
- Experience with Delta Sharing security and cross-organizational data-sharing governance
- Exposure to model risk management and AI/ML governance frameworks
- Experience with Apache Atlas, Apache Ranger, or comparable open-source data governance tools
Axos Bank Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Axos Bank and has not been reviewed or approved by Axos Bank.
-
Healthcare Strength — Health coverage includes medical, dental, and vision with multiple plan choices, plus HSA/FSA options and an Employee Assistance Program. Employer HSA contributions and extras like pet insurance and onsite fitness centers at some locations expand the wellness offering.
-
Leave & Time Off Breadth — Time off includes around 15 days of vacation for new hires, paid sick leave, and up to 11 company holidays annually. Availability of certain perks and holiday specifics can vary by location or subsidiary, but the baseline PTO/holiday combination is broadly competitive.
-
Retirement Support — A 401(k) with company match is offered alongside additional financial programs like a 529 plan, employee mortgage loans, and banking/trading perks. Automatic enrollment and structured matching underscore tangible retirement support for longer‑tenured employees.
Axos Bank Insights
What We Do
Axos is a technology-driven financial services company providing a diverse and ever-growing range of innovative products and services for personal, business and institutional clients nationwide. Powered by exceptional team members, a clearly defined set of values and a culture that is both meritocratic and self-governing, we are transforming banking as we know it. Our mission is summed up in two words: Banking Evolved. Banking Evolved means providing products and services that are technologically superior to our competitors and that offer our customers an unbeatable value proposition. Banking Evolved means continuously innovating and excelling in the following areas: • The incubation, creation and deployment of new businesses and tools that best serve our customers; • The evolution, optimization, delivery, distribution and marketing of our products; • The harnessing of data and technology to manage our business most effectively and efficiently; and • The development and engagement of our team members. To be part of the Axos team is to live our values as your own, to work with a strong sense of individual purpose and to embody a commitment to the shared success of our business. As a meritocracy, we believe that success is earned. We reward individuals on the basis of their achievements. As a self-governing organization, we derive strength from the internal resourcefulness of each individual. We emphasize independence, goal-setting and personal accountability.
