Information Security Analyst II - Federal Programs

VulnU; New York (NY); Hybrid; USD 116,000 - 145,000; Full time

Benefits offered by this job

Retirement match

Equity

Paid parental leave

Flexible PTO

Home-office stipend

Job summary

Datadog in New York is seeking an Information Security Analyst II for Federal Programs. You will support government certifications such as FedRAMP, GovRAMP, and DoD SRG, and provide SME guidance on information assurance across the Datadog product.

You will collaborate with security and engineering teams, manage assessments and audits, and help apply STIGs and eMASS guidance. A BS and 5+ years in security fields are required, with AWS cloud experience and ability to work with regulators.

Qualifications

• BS degree and a minimum of 5 years in security policy, compliance, or security operations.
• Experience designing, implementing, and assessing security controls for FedRAMP/DoD environments.
• Strong understanding of cloud services architecture (AWS).
• Ability to work with external stakeholders and auditors.

Responsibilities

• Support security efforts to obtain U.S. Government certifications (FedRAMP, GovRAMP, Cloud Computing SRG).
• Document Datadog practices to provide transparency to customers and stakeholders.
• Collaborate with security and engineering teams to design, implement, and monitor security controls.
• Engage with auditors regulators to explain compliance posture.
• Lead continuous monitoring, assessment, and reporting activities.
• Translate complex customer documents into concrete requirements for cross-functional teams.

Skills

Security policy

Compliance

Cloud architecture (AWS)

FedRAMP/DoD

External stakeholders

STIGs/eMASS guidance

Education

Bachelor's degree

Tools

AWS

eMASS

Job description

# Information Security Analyst II - Federal ProgramsDatadog · datadoghq.comCategory: Security EngineeringLocation: New York, New York, USAClearance: Public Trust## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* Equity* Paid parental leave* Flexible PTO* Home-office stipendAs an Information Security Analyst II for the Federal Programs team, you will support efforts to respond to U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable Security Technical Implementation Guides (STIGs) , as applicable. You will provide subject matter expertise for the design, implementation, operations, management, and maintenance of the Datadog product in all aspects of Information Assurance and Information Security as it relates to Datadog’s Federal Programs activities. This includes being able to assess and mitigate system security threats and risks, validate system security requirements, analyze and collaborate on system security designs, verify compliance with system security requirements, manage the complete internal and external assessment and audit lifecycle, testing, and act as a liaison with other departments and business units to support ongoing system security operations and maintenance. You will evaluate the suitability of Artificial Intelligence (AI)-backed products for Federal regulated industry customers and you will leverage AI to build automations which will allow Datadog to demonstrate compliance with current and future requirements.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You’ll Do: (Describe role responsibilities here)Support security efforts in pursuit of U.S. Government certifications and accreditations (FedRAMP, GovRAMP, Cloud Computing SRG).Document Datadog practices to provide transparency to customers, prospects and other stakeholders.Communicate directly with Datadog customers, prospects and other stakeholders.Work across security and engineering teams to design, implement, and monitor security and compliance features.Support assessment and continuous monitoring and reporting activities.Engage with external stakeholders (auditors, regulators, customers) to clearly explain Datadog’s compliance postureDesign and maintain defensive policies that allow the Datadog security and general engineering teams to move quickly and adapt to an evolving threat landscape.Synthesize complex customer documents (MSAs, Security Addendums, etc.) into concrete requirements for the Datadog Engineering, Legal and Finance teams.Use modern tooling to increase the capabilities and efficiency of existing compliance programs.Who You Are: (Describe role qualifications here)You have a BS and a minimum 5 years of relevant industry experienceYou have a proven track record working in security policy, compliance, information security operations or security consultingYou have a strong understanding of cloud services architecture (Amazon Web Services)You have demonstrable experience designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP certified and/or DoD Impact Levels 4⁄5 authorized system.You have managed and/or implemented Federal continuous monitoring activities with external stakeholdersYou have demonstrable experience partnering with stakeholder teams to implement standards and procedures that provide business value first while meeting control requirementsYou have experience with implementing the Cloud Computing Security Requirements Guide, STIGs, and working with Enterprise Mission Assurance Support Service (eMASS)You produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentationYou have or are able to acquire a certification in compliance with applicable Government requirementsEligibility to obtain US Government Security Clearance in the future, or current active adjudicated Public Trust Background Investigation, is a plusAbility to comply with ITAR and GovCloud requirements (e.g., US Person located within the US)Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.Benefits and Growth: (Describe opportunities offered here)New hire stock equity (RSUs) and employee stock purchase plan (ESPP)Continuous professional development, product training, and career pathingIntradepartmental mentor and buddy program for in-house networkingAn inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)Access to Inclusion Talks, our internal panel discussionsFree, global mental health benefits for employees and dependents age 6+Competitive global benefitsBenefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.To conform to US export control regulations, candidates should be eligible for any required authorizations from the US government. This job is available in various departments within our company; to conform to US export control regulations, some of these roles may require candidates to be eligible for any required authorizations from the US government.Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.The reasonably estimated yearly salary for this role at Datadog is:$116,000 $145,000 USDAbout Datadog:Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications.Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.