Here at Datadog, we think about offensive security a little bit differently. We embrace automation and AI to run adversary simulations continuously across a massive cloud-native environment, and we expect our offensive engineers to build the tooling that makes that possible. We're looking for a Senior Security Engineer who can execute sophisticated red team operations, write the code that scales them, and take an AI-first approach to offensive security engineering.

At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You'll Do:

• Plan and execute red team engagements end-to-end, simulating real-world threat actors across cloud infrastructure (AWS, GCP), Kubernetes, CI/CD pipelines, and corporate environments
• Build and maintain custom offensive tooling, automation frameworks, and engagement infrastructure, treating offensive operations as a software engineering problem
• Develop custom payloads and evasion capabilities tailored to Datadog's environment and modern defensive controls (EDR, SIEM, network monitoring)
• Improve the efficiency of offensive operations through thoughtful use of automation and AI, accelerating reconnaissance, vulnerability analysis, and reporting workflows
• Partner with the Detection & Response team on purple team exercises to validate detection logic, improve alert fidelity, and influence threat models
• Translate offensive findings into concrete improvements by working directly with defensive security and engineering teams to close gaps

Who You Are:

• You have 5+ years of hands-on experience in offensive security (red teaming, penetration testing, or adversary simulation) with a track record of operating against mature, well-defended environments
• You write production-quality code (Python, Go, or similar), can build your own tools, and automate your workflows rather than relying exclusively on off-the-shelf frameworks
• You have deep expertise in at least a two of the following areas: macOS security, Linux security, cloud platforms (AWS, GCP, Azure), Kubernetes, or CI/CD pipelines
• You have experience developing evasion techniques against modern defensive controls and understand how detections work from the blue team side
• You have strong communication skills, with the ability to convey complex offensive findings clearly and effectively to both technical and non-technical stakeholders
• You are comfortable operating with ambiguity, scoping your own work, identifying what matters most, and driving projects from prototype to deployed and validated

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you're passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

#LI-Hybrid

As a Staff Application Security Engineer at Datadog, you'll set technical direction for how we approach application security at scale. You'll define the frameworks, methodologies, and architectural patterns that engineering teams across Datadog adopt and apply independently. You're the person others come to when they don't know how to make something secure, and you reliably have an answer.

You'll be a point of contact for our most complex security programs, often spanning multiple teams and multiple quarters. The role requires both depth (going very deep on specific problems when needed) and breadth (recognizing patterns across systems and drawing connections that others miss). Partnering closely with teams inside and outside the security org is key to success. You'll help shape the AppSec roadmap and make the case for where investment should go. 

We use our own platform. Logs, Dashboards, Service Catalog, and APM aren't just things we sell: they're tools the AppSec team uses to build security services, measure adoption of secure defaults, and communicate risk across the organization.

AI is also part of the picture. Engineering at Datadog increasingly uses agentic tooling throughout the development lifecycle, and many of the products we ship to customers now include AI-powered features. Both create new attack surfaces, and defining our strategy for addressing them is part of this role.

If using Datadog to observe Datadog's own security posture, building impactful tooling, and shaping how we secure AI-powered systems sounds like the right kind of problem, this role is worth a close look.

What You’ll Do:

• Define and drive security standards and secure-by-default solutions, serving as the Application Security subject matter expert.

• Build security tooling and automation that scales security practices across engineering teams, and implement robust security observability to support our threat detection team with meaningful, actionable security signals.

• Lead threat modeling and risk assessment for high-risk features and platform changes.

• Assess and address security risks introduced by agentic development practices and AI-powered product features in production

• Partner with engineering teams to prioritize and remediate critical threats, define API security standards, and conduct security code reviews.

• Identify systemic security risks; lead complex, multi-team remediation efforts end-to-end

• Partner with Cloud & Infrastructure Security and other teams across the org on cross-domain problems; be the AppSec point of contact on complex cross-domain problems

• Serve as the AppSec subject matter expert across Datadog; be the person engineering leadership calls when they need clarity on a hard security problem

• Deeply invest in the growth of AppSec engineers on the team

Who You Are: 

• Software engineering background with hands-on code review experience; Go (preferred), Python, or Rust

• Demonstrated ability to level up the engineers around you: through design reviews, mentorship, and the quality of your documentation

• Solid grounding in OWASP Top 10, web vulnerabilities (XSS, injection, access control, cryptography), SAST, and DAST

• Working knowledge of API security: authentication flows, authorization patterns, and input validation at API boundaries

• Track record of leading threat modeling on complex, multi-team systems and translating outcomes into architectural decisions

• Experience implementing secure-by-default frameworks and integrating security into core platforms alongside product managers and engineering teams

• Able to translate business risk into security investment priorities and communicate tradeoffs clearly to executive audiences

• Familiarity with software supply chain security: dependency management, artifact integrity, and build pipeline trust

• Bias toward implementing solutions and driving adoption, not just surfacing findings

• Proven track record of winning buy-in from technical and non-technical stakeholders; able to communicate complex tradeoffs clearly to engineers, product managers, and leadership

• Current on security best practices, emerging threats, and the tooling landscape

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

• Continuous professional development, product training, and career pathing

• Intradepartmental mentor and buddy program for in-house networking

• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

• Access to Inclusion Talks, our internal panel discussions

• Free, global mental health benefits for employees and dependents age 6+

• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

#LI-Hybrid

#LI-Remote

#LI-Remote

Here at Datadog, we think about Vulnerability Management a little bit differently. We embrace open source software, and recognize our role in the software supply chain. We also see how attackers are weaponizing vulnerabilities faster than ever before. That’s why we’re looking for a Security Engineer who can help us scale and improve our overall vulnerability management lifecycle, and take an AI-first approach to addressing vulnerability risk.

At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Reduce engineering toil related to vulnerability remediation through a “PRs, not tickets” approach.

• Develop and operate automation to increase detection coverage and remediate root cause issues

• Work with critical partners like SDLC Security, Product Security, and a wide range of engineering teams to “shift left” and reduce upstream vulnerabilities entering our ecosystem.

• Improve the efficiency of our overall vulnerability management lifecycle through thoughtful use of automation and AI.

• Develop metrics and reporting to provide leadership with an accurate view of overall vulnerability risk.

• Provide evidence and subject matter expertise for vulnerability management processes and controls for multiple compliance frameworks (SOC2, HIPAA, PCI, FedRAMP, ISO)

Who You Are:

• You have experience with vulnerability management or similar domains like cloud security posture management, SDLC management, etc.

• You have strong communication skills, with the ability to convey technical information clearly and effectively to both technical and non-technical stakeholders.

• You have a proven track record of managing cross-functional collaboration between security, engineering, and product teams.

• You are experienced in one or more programming languages (Golang, Python, Java, etc.)

• You are a U.S. person and able to work on ITAR-controlled projects

• You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent experience
  
  

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

• Continuous professional development, product training, and career pathing

• Intradepartmental mentor and buddy program for in-house networking

• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

• Access to Inclusion Talks, our internal panel discussions

• Free, global mental health benefits for employees and dependents age 6+

• Competitive global benefits 

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

#LI-Hybrid

As a Cloud Security Engineer you will partner with different stakeholders across the organization to secure our cloud infrastructure. As part of the Platform Security organization we secure the building blocks of Datadog’s applications and infrastructure. We do this by building solutions to solve systemic risks and combine an approach of making the secure path easier and the insecure path harder to secure and accelerate the business. 

We regularly partner with the most bleeding edge internal products and are working to solve and build solutions to enable our safe usage of AI. We also develop AI based solutions to enable security at scale.

We are looking for a Service Mesh and Kubernetes focused security specialist to help round out an incredibly strong infrastructure security focused group. You will rotate through a variety of internal projects and gain deep exposure to Datadog’s infrastructure.

At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.

What You’ll Do: 

• Solve our most challenging cloud infrastructure security problems starting with our core building blocks and golden paths.

• Enable our engineers to build and ship secure solutions quickly.

• Build and extend Datadog’s Platform Security solutions.

• Leverage and influence the direction of Datadog’s products to secure our infrastructure, and provide internal feedback that enables our teams to improve the products for ourselves and our customers.

Who You Are: 

• You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience.

• Passionate about advocating for and implementing solutions to complex problems, at-scale, in a large multi-cloud environment.

• You don’t want to just provide security recommendations, you want to help implement solutions to solve systemic issues. 

• You have prior experience in Software Engineering, Systems Engineering, Network Engineering, or Cloud Security.

• You have experience developing, deploying, and extending service mesh systems  in production Kubernetes environments.

• Software engineering background with hands-on code review experience; Go, Python, or Rust

• Experience with one or more Kubernetes PKI & network technologies (Consul, Envoy, Cillium, Vault, Istio, etc.).

• Experience with one of the major cloud providers (AWS, Azure, GCP) and Kubernetes.

• Able to work both independently and collaboratively, willing to work in a fast paced, high growth environment.

• You stay updated with modern security best practices, technologies and emerging threats.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. 

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

• Continuous professional development, product training, and career pathing

• Intradepartmental mentor and buddy program for in-house networking

• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

• Access to Inclusion Talks, our Internal panel discussions

• Free, global mental health benefits for employees and dependents age 6+

• Competitive global benefits

The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining the trust of our customers by ensuring their data remains protected. In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats, ensuring that we can contain any incidents as quickly as possible. You will also contribute to the tools and systems that make us more effective in our mission, and help ensure we have cross-functional learning from incidents to improve our defensive posture going forward.

At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats.

• Triage escalated alerts to determine whether a security incident is occurring or may occur imminently.

• Respond to security incidents, whether as an incident commander or as an incident responder

• Make us more efficient through building tools and automations that eliminate repetitive processes

• Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements.

• Participate in a light on-call rotation.

Who You Are:

• You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains.

• You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform.

• You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive controls and actively stay up to date with the threat landscape from various blogs, whitepapers, and conference talks.

• You’ve used a wide range of technologies and datasets to detect threats in cloud and enterprise environments

• You have experience building and supporting tools for incident response and forensic use cases using Python, Go, or similar programming languages.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• Generous and competitive benefits package

• New hire stock equity (RSUs) and employee stock purchase plan

• Continuous career development and pathing opportunities

• Employee-focused best in class onboarding

• Internal mentor and cross-departmental buddy program

• Friendly and inclusive workplace culture

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

As a Senior Security Engineer on the AppSec Foundations team, you will be instrumental in making secure behavior the default across the Datadog platform. Your focus will be to build scalable, platform-level security controls to enforce production security invariants across our infrastructure and developer workflows.

You will operate at the intersection of distributed systems and security, focusing on enforcing security by construction. This approach eliminates reliance on manual reviews or reactive fixes, enabling engineering teams to move fast without needing specialized security expertise.

A key part of this role involves shaping the implementation of identity, access, and isolation across our systems, including support for next-generation, AI-driven, and agentic workloads. By defining how security is automatically built-in across Datadog’s platform, your work will improve consistency, reduce friction for engineering teams, and enable the company to scale securely as we expand into new technological domains.

What You’ll Do:

• Design and implement secure-by-default platform controls, improving the security of our APIs and services.

• Build and evolve security systems and enforcement layers (e.g., gateways, middleware, policy engines) that operate at scale across distributed systems

• Define and standardize security patterns that can be broadly adopted across services, reducing the need for custom implementations

• Integrate security controls into developer workflows, infrastructure, and platform abstractions to drive high adoption

• Identify recurring security risks and translate them into reusable, enforced platform primitives

• Partner with engineering teams to influence system design and build out security that is embedded early in the development lifecycle

• Contribute to threat modeling and security reviews where needed, with a focus on turning findings into systemic improvements

• Leverage application telemetry (logs, traces, metrics) to assess security posture and drive improvements

Who You Are:

• You have a strong background in software engineering and experience building distributed systems (Go or Python preferred)

• You have experience designing and implementing security controls or systems (e.g., authentication, authorization, API security, or infrastructure security)

• You have built shared infrastructure, internal platforms, libraries, frameworks, or enforcement mechanisms used by other engineering teams.

• You understand how modern systems handle identity, communication, and trust boundaries (e.g., mTLS, service identity, API gateways)

• You are comfortable operating in ambiguous environments and working across new problem spaces

• You make pragmatic security decisions that balance risk, usability, and scalability

• You are driven to not only identify security issues but also design and implement solutions that prevent them at scale

Nice to Have:

• Experience with zero trust architectures or service-to-service security models

• Familiarity with policy-based systems or large-scale access control models

• Experience working with untrusted or non-deterministic workloads (e.g., sandboxing, agent-based systems)

• Experience using observability and telemetry to drive security insights and adoption

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

• Continuous professional development, product training, and career pathing

• Intradepartmental mentor and buddy program for in-house networking

• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

• Access to Inclusion Talks, our internal panel discussions

• Free, global mental health benefits for employees and dependents age 6+

• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

To conform to US export control regulations, candidates should be eligible for any required authorizations from the US government. This job is available in various departments within our company; to conform to US export control regulations, some of these roles may require candidates to be eligible for any required authorizations from the US government.

#LI-Hybrid

#LI-Hybrid

Here at Datadog, we think about Vulnerability Management a little bit differently. We embrace open source software, and recognize our role in the software supply chain. We also see how attackers are weaponizing vulnerabilities faster than ever before. That’s why we’re looking for a Security Engineering Manager who can help us scale and improve our overall vulnerability management lifecycle, and take an AI-first approach to addressing vulnerability risk.

At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Lead, mentor, and grow a team of security engineers responsible for vulnerability management across Datadog’s internal environment, from source code to production.
• Work with critical partners like SDLC Security, Product Security, and a wide range of engineering teams to “shift left” and reduce upstream vulnerabilities entering our ecosystem.
• Reduce engineering toil related to vulnerability remediation through a “PRs, not tickets” approach.
• Improve the efficiency of our overall vulnerability management lifecycle through thoughtful use of automation and AI.
• Develop metrics and reporting to provide leadership with an accurate view of overall vulnerability risk.
• Provide evidence and subject matter expertise for vulnerability management processes and controls for multiple compliance frameworks (SOC2, HIPAA, PCI, FedRAMP, ISO)

Who You Are:

• You have experience with vulnerability management or similar domains like cloud security posture management, SDLC management, etc.
• You have excellent leadership, mentorship, and coaching skills, with the ability to foster a high-performing security team for a large software ecosystem
• You have strong communication skills, with the ability to convey technical information clearly and effectively to both technical and non-technical stakeholders.
• You have a proven track record of managing cross-functional collaboration between security, engineering, and product teams.
• You are experienced in one or more programming languages (Golang, Python, Java, etc.)
• You are a U.S. person and able to work on ITAR-controlled projects
• You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent experience

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits 

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

#LI-Hybrid