Security Engineer II, Threat Detection
As a Senior Security Engineer on the Detection Engineering and Threat Hunting team, you’ll lead the development of high-fidelity detection content across a diverse set of log integrations, with a strong focus on cloud-native data.
You’ll play a critical role in identifying and responding to emerging threats across Datadog’s infrastructure, working closely with internal incident response, threat intelligence and product stakeholders. This is a highly collaborative, impactful opportunity to shape our detection capabilities while using Datadog’s own security products to drive continuous improvement.
At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.
What You’ll Do:
- Implement the detection engineering lifecycle to identify threats across Datadog’s infrastructure and manage a scalable detection backlog
- Build, maintain, and refine detection metrics to communicate effectiveness and drive improvements with cross-functional stakeholders
- Research and operationalize log telemetry from the Datadog Logs platform into actionable security detections within the Datdog platform
- Partner with incident response teams during active threats, helping guide threat hunting and containment strategies
- Identify inefficiencies in detection content development and implement tooling and automation to streamline engineering workflows
- Lead the development of threat hunts based on the latest threat intelligence and attack surface priorities to identify missed threats, uncover gaps in telemetry, and ideate on new detections
Who You Are:
- You have experience in detection engineering, threat hunting, security operations, cloud security, or other operational security domains
- You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform
- Experience working closely with threat intelligence teams to research threats and translate insights into detections.
- You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive controls and actively stay up to date with new advancements in detection engineering from various blogs, whitepapers, and conference talks.
- You’re experienced in interpreting Linux telemetry to detect threats at runtime
- You’ve used a wide range of technologies and datasets to detect threats in cloud environments
- You are experienced in building and supporting tools to for detection and threat hunting use cases using Python, Go, or similar programming languagesDatadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.
- Generous and competitive benefits package
- New hire stock equity (RSUs) and employee stock purchase plan
- Continuous career development and pathing opportunities
- Employee-focused best in class onboarding
- Internal mentor and cross-departmental buddy program
- Friendly and inclusive workplace culture
About Datadog:
Datadog (NASDAQ: DDOG) is a global SaaS business, delivering a rare combination of growth and profitability. We are on a mission to break down silos and solve complexity in the cloud age by enabling digital transformation, cloud migration, and infrastructure monitoring of our customers’ entire technology stacks. Built by engineers, for engineers, Datadog is used by organizations of all sizes across a wide range of industries. Together, we champion professional development, diversity of thought, innovation, and work excellence to empower continuous growth. Join the pack and become part of a collaborative, pragmatic, and thoughtful people-first community where we solve tough problems, take smart risks, and celebrate one another. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.
Equal Opportunity at Datadog:
Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.
Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications.
Privacy and AI Guidelines:
Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.