Senior Security Engineer, Security Incident Response Team

Datadog
New York, NY

Who this role is best for

Aimed at mid-to-senior level security professionals with incident response experience who thrive in collaborative, hybrid environments.

Best fit for

  • Candidates with 5+ years in incident response or threat hunting and cloud security expertise
    — “You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains.”
  • Professionals who are active in the threat intelligence community and understand modern attack techniques
    — “You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive controls and actively stay up to date with the threat landscape.”

Things to consider

  • Hybrid work arrangement may require in-office presence despite flexibility
    — “We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.”
  • Light on-call rotation implies some availability outside normal working hours
    — “Participate in a light on-call rotation.”

How to stand out

  • Showcase incident response automation projects and cloud-native security tooling in your resume
    — “Make us more efficient through building tools and automations that eliminate repetitive processes.”
  • Highlight post-incident review and process improvement contributions in your interview narrative
    — “Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements.”
  • Emphasize your ability to collaborate across teams and handle high-signal detection work
    — “Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats.”
Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • successful incident response
  • improved security posture
Typical background
security operationscloud securityincident response

Skills & requirements

Required

Security Incident ResponseCloud SecurityThreat HuntingAutomationSecurity Operations

Preferred

Cloud-native TechnologiesPythonGo

Stack & domain

Security Incident ResponseCloud SecurityThreat HuntingProblem SolvingTeamworkCommunicationCybersecurityIT Security

About the role

Original posting from Datadog

The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining the trust of our customers by ensuring their data remains protected. In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats, ensuring that we can contain any incidents as quickly as possible. You will also contribute to the tools and systems that make us more effective in our mission, and help ensure we have cross-functional learning from incidents to improve our defensive posture going forward.

At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats.

Triage escalated alerts to determine whether a security incident is occurring or may occur imminently.

Respond to security incidents, whether as an incident commander or as an incident responder

Make us more efficient through building tools and automations that eliminate repetitive processes

Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements.

Participate in a light on-call rotation.

Who You Are:

You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains.

You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform.

You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive controls and actively stay up to date with the threat landscape from various blogs, whitepapers, and conference talks.

You’ve used a wide range of technologies and datasets to detect threats in cloud and enterprise environments

You have experience building and supporting tools for incident response and forensic use cases using Python, Go, or similar programming languages.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

Generous and competitive benefits package

New hire stock equity (RSUs) and employee stock purchase plan

Continuous career development and pathing opportunities

Employee-focused best in class onboarding

Internal mentor and cross-departmental buddy program

Friendly and inclusive workplace culture

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

#LI-Hybrid

Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.

The reasonably estimated yearly salary for this role at Datadog is:$192,000—$240,000 USD

About Datadog: 

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.

Equal Opportunity at Datadog:

Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. 

Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. 

Privacy and AI Guidelines:

Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

Source: Datadog careers

Similar roles