Engineering Manager I, Threat Detection

The available sources do not contain information about the company name for rounx.com.; United States; On-site; USD 192,000 - 240,000; Full time

Benefits offered by this job

Generous benefits

RSUs / equity

Career development

Onboarding

Mentor program

Inclusive culture

Job summary

Datadog is seeking an Engineering Manager for Threat Detection to lead a high-performing team responsible for building and executing our detection and AI strategy.

You will partner with SIRT, CTI, AI Engineering, and the broader Security organization to scale detection capabilities and drive impactful outcomes across the security program. The role is hybrid, emphasizing mentorship, collaboration, and measurable delivery.

Qualifications

• Experience in security operations, detection engineering, or incident response with tooling development and investigations.
• Understanding of threat actor techniques and the detection engineering lifecycle.
• Ability to review detection logic, code (Python), and security architecture (AI-driven or otherwise).
• Experience building automation for security workflows: detection platforms, AI-driven detections, triage, and analyst tooling.

Responsibilities

• Lead strategy, roadmap, and execution of AI-accelerated detection and response.
• Drive development of high-fidelity detections across the organization to improve coverage and signal quality.
• Build, mentor, and grow a high-performing team of engineers focused on threat detection at scale.
• Partner with Threat Detection teams to ensure deliverables integrate with the program.
• Define and track metrics for detection coverage, signal quality, and incident readiness.
• Communicate progress and tradeoffs to security leadership and partner teams.
• Collaborate with AI Engineering to leverage shared infrastructure and security tooling.

Skills

Security operations

Detection engineering

Incident response

Python development

Leadership / people management

SaaS / cloud security

Tools

SIEM pipelines

CI/CD for security content

Job description

As Engineering Manager for Threat Detection, you will lead a high-performing team that powers Datadog's detection program. Threat Detection is the organization responsible for keeping Datadog ahead of an evolving threat environment: closing coverage gaps faster, raising the bar on signal quality, and shipping detections that hold up under the scale and complexity of cloud-native infrastructure.

Your team will combine direct detection expertise, platform engineering, and applied AI to ship detections at a pace and scale traditional rule-writing alone cannot match. Examples of what your team will work on include detection-authoring agents, the detection platform that powers every rule in production, coverage analysis, alert triage and response automation, and the evaluation infrastructure that holds these systems to a high bar of fidelity. Detection authorship is a shared responsibility across the organization, and your team will contribute both by building the systems that scale our authoring capacity and by writing detections directly when their domain expertise is the right tool.

You will partner closely with our Security Incident & Response Team (SIRT), Cyber Threat Intelligence (CTI), AI Engineering teams, and Datadog's broader Security organization. This is a high-impact leadership role: you will grow a team of security and software engineers responsible for building and executing our detection and AI strategy. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Lead the strategy, roadmap, and execution of Datadog Security's shift to AI-accelerated detection and response.
• Drive development of high-fidelity detections as a shared responsibility across the organization, ensuring your team's systems and direct contributions raise the bar on coverage and signal quality.
• Build, mentor, and grow a high-performing team of engineers tackling the hardest problems in threat detection at scale.
• Partner with sister teams across Threat Detection and the broader Security organization so your team's deliverables integrate reliably with the rest of the program.
• Define and track program metrics: detection coverage, signal quality, model and agent fidelity, evaluation pass rates, incident response readiness, and your team's measurable contribution to security operations outcomes.
• Evangelize the team's mission inside and outside the Threat Detection organization, communicating progress, tradeoffs, and bets clearly to security leadership and partner teams.
• Collaborate with the AI Engineering teams and other internal AI initiatives to build on shared infrastructure where it makes sense and invest in security-specific tooling where it does not.

Who You Are:

• You have worked in a security operations, detection engineering, or incident response role, building tooling and performing investigations and responding to incidents.
• Strong understanding of modern threat actor techniques and the detection engineering lifecycle.
• Technically credible, with the ability to review detection logic, code (e.g., Python), and the architecture of security systems (AI-driven or otherwise).
• You have built automation systems for security operations workflows: detection platforms, AI-driven detection capabilities, case triage, investigation, response automation, or analyst tooling.
• You have prior experience at a SaaS or cloud infrastructure company where security scale and complexity are first-order challenges.
• You operate with both rigor and pragmatism on production quality. You know when to ship a useful system, when to invest in further evaluation, and when not to ship at all.
• Experienced people leader with a focus on mentorship, team growth, and inclusion.

Nice to haves:

• You have led or sponsored threat hunts that drove lasting improvements in detection coverage.
• You have translated security research, threat intelligence, or analyst workflows into engineered systems.
• You have designed or operated detection platforms: SIEM pipelines, detection-as-code workflows, CI/CD for security content, or equivalent.
• You have built observability for detection systems: instrumentation for coverage and drift, false positive analysis, or silent failure detection.
• You have built and shipped agentic or ML systems to production. You understand the full lifecycle (data, training, evaluation, deployment, monitoring) and have led teams through it.
• You have designed safety, guardrails, or human-in-the-loop systems for autonomous AI in security domains.

Benefits and Growth:

• Generous and competitive benefits package
• New hire stock equity (RSUs) and employee stock purchase plan
• Continuous career development and pathing opportunities
• Employee-focused best in class onboarding
• Internal mentor and cross-departmental buddy program
• Friendly and inclusive workplace culture

Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.

The reasonably estimated yearly salary for this role at Datadog is: $192,000 - $240,000 USD

Equal Opportunity at Datadog:

Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.