Senior Platform Security Engineer — Cloud & Kubernetes

Datadog, Inc.; Paris; Hybrid; EUR 120,000 - 170,000; Full time

Benefits offered by this job

RSUs and ESPP

Professional development

Mentor/buddy program

Inclusive culture

Mental health benefits

Global benefits

Job summary

Datadog is seeking a Platform Security Engineer to collaborate across the organization to secure its infrastructure and platform components. You will influence security across core building blocks and help engineers ship secure solutions quickly.

You will work in a multi-cloud, self-managed Kubernetes environment, applying security frameworks and securing authentication flows, authorization patterns, and deployment mechanisms. This role emphasizes hands-on security and cross-team collaboration.

Qualifications

• BS/MS/PhD in Computer Science, Engineering or related field or equivalent experience.

Responsibilities

• Secure core building blocks of Datadog’s platform and infrastructure.
• Enable engineers to ship secure solutions quickly.
• Build and extend Platform Security solutions.
• Influence product direction to secure infrastructure and provide internal feedback.

Skills

Cloud security

Kubernetes

Go

Python

Rust

Security frameworks

Software engineering

Code review

Multi-cloud

Collaboration

Education

BS/MS/PhD in CS/Engineering or related field

Tools

Consul

Envoy

Cilium

Vault

Istio

Job description

As a Platform Security Engineer you will partner with different stakeholders across the organization to secure our infrastructure and application components of the Datadog platform. As part of the Platform Security organization we secure the building blocks of Datadog’s applications and infrastructure. We do this by building solutions solving systemic risks making the secure path easier and the insecure path harder.

At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.

What You’ll Do:

• Solve our most challenging cloud infrastructure security & application security problems starting with our core building blocks and golden paths.

• Enable our engineers to build and ship secure solutions quickly.

• Build and extend Datadog’s Platform Security solutions.

• Leverage and influence the direction of Datadog’s products to secure our infrastructure, and provide internal feedback that enables our teams to improve the products for ourselves and our customers.

Who You Are:

• You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience.

• You don't want to just provide security recommendations, you want to help implement solutions to solve systemic issues.

• Passionate about advocating for and implementing solutions to complex security problems, at-scale, in a large multi-cloud self-managed Kubernetes environment.

• Proven experience in securing enterprise SaaS applications including securing the underlying authentication flows, authorization patterns, and input validation at API boundaries.

• You have hands-on experience with Linux kernel internals (namespaces, cgroups, capabilities, seccomp) and hardening techniques such as KASLR, module allowlisting, or kernel self-protection (KSPP) controls.

• Experience with virtualization or microVM technologies (KVM, QEMU, Kata Containers, Firecracker, or similar) and the security boundaries a hypervisor provides versus a container.

• Familiarity with container runtime internals (containerd, OCI runtimes, checkpoint/restore).

• Demonstrated experience in securing the deployment & management mechanisms for software and infrastructure changes.

• Familiarity with common security frameworks such as OWASP, MITRE ATT&CK, PASTA/STRIDE, CIS, etc.

• You have prior experience in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security or Application Security.

• Software engineering background with hands-on code review experience; Go, Python, or Rust

• Experience with one or more Kubernetes PKI & network technologies (Consul, Envoy, Cilium, Vault, Istio, etc.) and eBPF-based tooling.

• Experience with one of the major cloud providers (AWS, Azure, GCP) and Kubernetes.

• Able to work both independently and collaboratively, willing to work in a fast paced, high growth environment.

• You stay updated with modern security best practices, technologies and emerging threats.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

• Continuous professional development, product training, and career pathing

• Intradepartmental mentor and buddy program for in-house networking

• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

• Access to Inclusion Talks, our Internal panel discussions

• Free, global mental health benefits for employees and dependents age 6+

• Competitive global benefits

LI-Hybrid

About Datadog:

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram , LinkedIn, and Datadog Learning Center.

Equal Opportunity at Datadog:

Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.

Datadog …