Senior Incident Response Engineer — Cloud & Automation

VulnU; New York (NY); Hybrid; USD 192,000 - 240,000; Full time

Benefits offered by this job

Retirement match

Equity

Paid parental leave

Flexible PTO

Home-office stipend

Job summary

Datadog’s Security Incident Response Team seeks a Senior Security Engineer to triage and respond to incidents, lead expert responders, and improve defensive posture. You’ll collaborate across teams to identify threats and develop automation for faster containment, while maintaining a strong focus on cloud-native environments.

You bring 5+ years in IR/Threat hunting, hands-on with AWS/GCP/Azure, Kubernetes, Docker, Terraform, and fluent in Python or Go for tooling and intelligence workflows.

Qualifications

• At least 5 years of experience in security incident response, threat hunting, security operations, or cloud security.
• Experience with public cloud platforms (AWS, GCP, or Azure) and cloud-native tech (Kubernetes, Docker, Terraform).
• Strong understanding of cloud-native threat actor TTPs and defensive controls; active learning from threat intel sources.
• Experience building/supporting incident response and forensic tools using Python, Go, or similar languages.

Responsibilities

• Triage and respond to security incidents; act as incident commander or responder as needed.
• Identify threats, triage alerts, and determine incident likelihood or occurrence.
• Develop tools and automations to reduce repetitive incident-response work.
• Lead post-incident reviews, tabletop exercises, and improve runbooks.

Skills

Security incident response

Threat hunting

Cloud security

Security operations

Python/Go programming

Tools

AWS

GCP

Azure

Kubernetes

Docker

Terraform

Job description

Datadog’s Security Incident Response Team seeks a Senior Security Engineer to triage and respond to incidents, lead expert responders, and improve defensive posture. You’ll collaborate across teams to identify threats and develop automation for faster containment, while maintaining a strong focus on cloud-native environments.

You bring 5+ years in IR/Threat hunting, hands-on with AWS/GCP/Azure, Kubernetes, Docker, Terraform, and fluent in Python or Go for tooling and intelligence workflows.