Information Security Analyst II - Federal Programs

Datadog; Boston (MA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

New hire stock equity (RSUs)

Employee stock purchase plan (ESPP)

Continuous professional development

Mentor and buddy program

Inclusion Talks and ERGs

Global mental health benefits

Competitive global benefits

Job summary

Datadog, Inc. is seeking an Information Security Analyst II for the Federal Programs team to help achieve and maintain U.S. Government certifications and compliance across FedRAMP Rev.

5, FedRAMP 20x, and DoD requirements. You will guide security controls, collaborate with cross-functional teams, and assess AI-enabled solutions for regulatory readiness. You will operate in a hybrid Datadog environment, engaging with auditors, regulators, and engineers to ensure Datadog’s Federal programs meet

Qualifications

• BS degree and 5+ years in security policy, compliance, information security operations or security consulting.
• Proven track record with security controls for FedRAMP or DoD IL4/IL5 systems.
• Experience with external audits and regulatory certifications.

Responsibilities

• Support security efforts toward U.S. Government certifications (FedRAMP, GovRAMP, Cloud Computing SRG).
• Document Datadog practices for transparency to customers and stakeholders.
• Collaborate with security and engineering teams to design, implement, and monitor security features.

Skills

Security policy

Compliance

Information security operations

Security consulting

Cloud services architecture

FedRAMP

DoD security requirements

Education

Bachelor's degree

Tools

AWS

eMASS

STIGs

Job description

As an Information Security Analyst II for the Federal Programs team, you will support efforts to respond to U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable Security Technical Implementation Guides (STIGs) , as applicable. You will provide subject matter expertise for the design, implementation, operations, management, and maintenance of the Datadog product in all aspects of Information Assurance and Information Security as it relates to Datadog's Federal Programs activities. This includes being able to assess and mitigate system security threats and risks, validate system security requirements, analyze and collaborate on system security designs, verify compliance with system security requirements, manage the complete internal and external assessment and audit lifecycle, testing, and act as a liaison with other departments and business units to support ongoing system security operations and maintenance. You will evaluate the suitability of Artificial Intelligence (AI)-backed products for Federal regulated industry customers and you will leverage AI to build automations which will allow Datadog to demonstrate compliance with current and future requirements.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You'll Do: (Describe role responsibilities here)

• Support security efforts in pursuit of U.S. Government certifications and accreditations (FedRAMP, GovRAMP, Cloud Computing SRG).
• Document Datadog practices to provide transparency to customers, prospects and other stakeholders.
• Communicate directly with Datadog customers, prospects and other stakeholders.
• Work across security and engineering teams to design, implement, and monitor security and compliance features.
• Support assessment and continuous monitoring and reporting activities.
• Engage with external stakeholders (auditors, regulators, customers) to clearly explain Datadog's compliance posture
• Design and maintain defensive policies that allow the Datadog security and general engineering teams to move quickly and adapt to an evolving threat landscape.
• Synthesize complex customer documents (MSAs, Security Addendums, etc.) into concrete requirements for the Datadog Engineering, Legal and Finance teams.
• Use modern tooling to increase the capabilities and efficiency of existing compliance programs.

Who You Are: (Describe role qualifications here)

• You have a BS and a minimum 5 years of relevant industry experience
• You have a proven track record working in security policy, compliance, information security operations or security consulting
• You have a strong understanding of cloud services architecture (Amazon Web Services)
• You have demonstrable experience designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP certified and/or DoD Impact Levels ⅘ authorized system.
• You have managed and/or implemented Federal continuous monitoring activities with external stakeholders
• You have demonstrable experience partnering with stakeholder teams to implement standards and procedures that provide business value first while meeting control requirements
• You have experience with implementing the Cloud Computing Security Requirements Guide, STIGs, and working with Enterprise Mission Assurance Support Service (eMASS)
• You produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation
• You have or are able to acquire a certification in compliance with applicable Government requirements
• Eligibility to obtain US Government Security Clearance in the future, or current active adjudicated Public Trust Background Investigation, is a plus
• Ability to comply with ITAR and GovCloud requirements (e.g., US Person located within the US)

Benefits and Growth: (Describe opportunities offered here)

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits
• Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

To conform to US export contro