Job Information
Datadog, Inc Senior Security Engineer - Threat Detection in Seattle, Washington
The Security Research Team at Datadog conducts cutting-edge research in Cloud Security, Threat Research, Application Security, and Detection Engineering. The team uses this research to track the evolving threat landscape, improve Datadog's security posture and our customer's security posture, and to help the community via publications, disclosures and information sharing. As a part of the Security Research organization, you will join a diverse team of hackers, researchers, and builders who consistently deliver industry-leading research. The Opportunity: As a Senior Security Engineer, you will lead the delivery of detection content across a wide array of log integrations, with a heightened focus on cloud native datasets, ensuring the detection of threats for Datadog in near real-time. You will creatively identify ways to provide detection coverage across different technology classes such as public cloud platforms, SaaS applications, endpoint and network technologies, and many more. You will work closely with the internal response team during security incidents, leveraging your expertise and knowledge of our space to help direct teams on how to appropriately hunt and respond to threats in real time .Additionally, you'll serve as the voice of the customer to continuously provide product feedback through our partner product teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Implement the detection engineering lifecycle to detect threats in Datadog infrastructure while building the detection backlog Build, maintain and adjust detection engineering metrics to communicate with stakeholders outside our organization and to drive change when inefficiencies are found Research, ideate and implement the most efficient way to operationalize log telemetry end-to-end from our Logs platform into our security products Participate in emerging events, such as emerging vulnerabilities or threats, to help our incident response team hunt and contain threats at Datadog Identify and drive inefficiencies out of content development processes through the creation of innovative tooling and automation Develop threat hunts based on scenarios captured from open-source and closed-source intelligence sources to identify gaps in telemetry, detection or unearth potential intrusions Partner with our software engineering teams to drive a roadmap for new tools and services to increase the velocity of detection engineering Who You Are: A previous background in detection engineering, cloud security engineering or other operational security function Experience operating in at least one public cloud platform (AWS, GCP, Azure) and other cloud native technologies (Kubernetes, Docker, Terraform) Advanced understanding of modern cloud native attacker techniques and are familiar with technical controls to prevent and detect these attacks Proficient understanding of Linux internals and associated telemetry to detect threats at runtime Vast experience detecting threats in a modern cloud focused environment through a wide variety of technologies and datasets using a modern detection engineering approach Basic proficiency with Python, Golang or other programming languages Experience measuring the quantitative and qualitative effectiveness of security controls to make data-driven decisions Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you're passionate about technology and want to grow your skills, we encourage you to apply. Benefits and Growth: Generous and competitive global and US benefits New hire stock equity (RSUs) and employee stock purchase plan Continuous care