Security Engineer II, Threat Detection

The Detection Engineering and Threat Hunting team builds high-signal detection content. We partner closely with internal stakeholders and leverage Datadog's own security products to continuously evolve our detection and response capabilities.

As a Threat Detection Engineer II, you will deliver detection content sourcing a wide variety of data, especially cloud native datasets and workload runtime events, to detect threats in near real-time. You will creatively identify ways to provide detection coverage across different technology classes such as public cloud platforms, SaaS applications, endpoint and network technologies, and many more. Together with your team, you will research attacker techniques against cloud-native technologies and other attack surfaces. You'll apply data-driven insights to generate the highest quality security signal for our incident response teams.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You'll Do:

• Learn everything about detecting threats in cloud-native environments and pour it back into building great cloud security content
• Research and ideate the most ideal way to operationalize telemetry end-to-end from our data platforms into our Cloud SIEM and Workload Protection products as detections
• Participate in responding to emerging threats and vulnerabilities with our Cyber Threat Intelligence and Incident Response teams, helping perform threat hunts and investigations
• Identify and drive inefficiencies out of content development processes through the creation of innovative tooling, automation; shepherd platform issues impacting content development and user experience through engineering to completion

Who You Are:

• A previous background in detection engineering, cloud security engineering or other operational security function
• Experience operating in at least one public cloud platform (AWS, GCP, Azure) and other cloud native technologies (Kubernetes, Docker, Terraform)
• Understanding of modern cloud native attacker techniques and are familiar with technical controls to prevent and detect these attacks
• Proficient understanding of Linux internals and associated telemetry to detect threats at runtime
• Experience detecting threats at scale through a wide variety of technologies and datasets using a modern detection engineering approach
• Proficiency with Python, Golang or other programming languages
• Experience measuring the quantitative and qualitative effectiveness of security controls to make data-driven decisions

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you're passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

About Datadog:
Datadog (NASDAQ: DDOG) is a global SaaS business, delivering a rare combination of growth and profitability. We are on a mission to break down silos and solve complexity in the cloud age by enabling digital transformation, cloud migration, and infrastructure monitoring of our customers' entire technology stacks. Built by engineers, for engineers, Datadog is used by organizations of all sizes across a wide range of industries. Together, we champion professional development, diversity of thought, innovation, and work excellence to empower continuous growth. Join the pack and become part of a collaborative, pragmatic, and thoughtful people-first community where we solve tough problems, take smart risks, and celebrate one another. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.

Equal Opportunity at Datadog:
Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.

Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications.

Privacy and AI Guidelines:
Any information you submit to Datadog as part of your application will be processed in accordance with Datadog's Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.