Greg Speranza

Cybersecurity teams often struggle with the cost and scale of analyzing massive telemetry. JetBlue solved this by building a security-first analytics platform on the Databricks lakehouse. By leveraging Delta Lake, Auto Loader, and Databricks SQL, JetBlue ingests high-cardinality data into low-cost cloud storage, applying compute only when necessary. This enables long-term retention and flexible analysis that legacy tools find prohibitively expensive. Using Databricks SQL, they developed a fastly-focused security layer to: - Detect anomalies and bot abuse - Measure CAPTCHA effectiveness - Analyze attack trends by IP, geography, and path - Support real-time and historical investigations - Decoupling storage from compute resulted in faster investigations, better visibility, and significant savings. Attendees will learn how to use Databricks to scale detection and investigation workflows cost-effectively.