Security Engineer 2 - Cyber Threat Intelligence

The available sources do not contain information about the company name for rounx.com.; United States; On-site; USD 128,000 - 160,000; Full time

Job summary

Datadog seeks a Security Engineer 2 on the Cyber Threat Intelligence team to identify, analyze, and operationalize intelligence on threat actors, campaigns, and emerging threats. You’ll translate intelligence into actionable security improvements across Datadog and influence detection and response strategies.

You’ll develop tooling, perform threat hunting, and collaborate with security and engineering teams to integrate intelligence into detections and response workflows, including sharing with

Qualifications

• Experience writing and presenting operational and technical intelligence for threat detection and response.
• Ability to translate intelligence into detections and response workflows.
• Experience with information-sharing communities and handling TLP-designated intelligence.
• Experience analyzing large-scale emerging threats and nation-state threat actors.
• Strong scripting and tooling development for automation.

Responsibilities

• Develop and maintain tooling that automates collection, processing, analysis, and dissemination of threat intelligence.
• Assess emerging vulnerabilities, threat activity, and security events to help stakeholders understand potential impact to Datadog.
• Conduct threat hunting and infrastructure analysis to identify adversary activity and improve defensive controls.
• Partner with security teams to operationalize intelligence into detections, investigations, and response workflows.
• Coordinate with information-sharing communities to gather, evaluate, and disseminate actionable intelligence.
• Produce technical briefings, threat reports, and intelligence products for security and engineering stakeholders.

Skills

Threat intelligence

Threat hunting

Malware analysis

Scripting

Security tooling

Job description

As a Security Engineer 2 on the Cyber Threat Intelligence team, you will help Datadog stay ahead of evolving threats by identifying, analyzing, and operationalizing intelligence on threat actors, campaigns, and emerging threats. Working within Security Engineering, you will partner closely with security teams to translate intelligence into actionable security improvements across the company. You will serve as a subject matter expert on how the cyber threat landscape intersects with Datadog and contribute to intelligence-led decision making during both steady-state operations and active security incidents. This role provides opportunities to influence detection, response, and security strategy through technical analysis, collaboration, and intelligence-driven initiatives.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Develop and maintain tooling that automates the collection, processing, analysis, and dissemination of threat intelligence.
• Assess emerging vulnerabilities, threat activity, and security events to help stakeholders understand potential impact to Datadog.
• Conduct threat hunting and infrastructure analysis to identify adversary activity relevant to Datadog and improve defensive controls.
• Partner with security teams to operationalize intelligence into detections, investigations, and response workflows.
• Coordinate with information-sharing communities to gather, evaluate, and disseminate actionable intelligence.
• Produce technical briefings, threat reports, and intelligence products for security and engineering stakeholders.

Who You Are:

• Experienced in writing and presenting operational and technical intelligence for threat detection, response, and security stakeholders.
• Skilled in partnering with detection and response teams to support investigations, improve response playbooks, and prioritize detection opportunities based on adversary tactics, techniques, and procedures (TTPs).
• Familiar with information-sharing communities and able to apply sound judgment when handling and operationalizing TLP-designated intelligence.
• Experienced in identifying and responding to large-scale emerging threats, including supply chain compromises, industry-wide campaigns, and exploitation of newly disclosed vulnerabilities.
• Experienced in dynamic/static analysis of Linux and MacOS malware and in tracking cloud-native cybercrime and nation-state threat actors.
• Proficient in developing threat intelligence tooling and automation through software development and scripting.

Nice to Have:

• Experience presenting at security conferences and publishing threat research.
• Experience with malware reverse engineering.

To conform to US export control regulations, candidates should be eligible for any required authorizations from the US government.

Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.

The reasonably estimated yearly salary for this role at Datadog is: $128,000-$160,000 USD

Equal Opportunity at Datadog:

Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.