Senior Product Security Architect — Secure Cloud Agents

Datadog, Inc.; Michigan; Hybrid; USD 192,000 - 240,000; Full time

Job summary

Datadog, Inc. is seeking a security leader to own the Bits Code security architecture from design to production.

You will collaborate with engineering, product, and security teams to identify risks and shape the product while building threat models for agent risks like prompt injection. You'll help the team ship secure software quickly by maintaining core libraries, guiding processes, and culture, and working with sandbox teams on execution of untrusted workloads.

Qualifications

• BS/MS/PhD or 5+ years of experience in security architecture or product security.
• Experience securing systems across complex trust boundaries.
• Experience building and operating full stack systems at scale.
• Familiar with security risks in agentic systems and designing against them.

Responsibilities

• Own the security architecture and implementation of Bits Code from design through production.
• Collaborate with engineering, product, infrastructure, and security teams to identify risks and shape the product.
• Build threat models for new and existing agent risks such as prompt injection.
• Help ship secure software fast by writing and maintaining core libraries and guiding processes and culture.
• Coordinate with sandbox teams on how Bits Code executes untrusted workloads.
• Be on call as part of Datadog's DevOps culture.

Skills

Security architecture

Product security

Full stack systems

Agentic systems risk

Education

BS/MS/PhD in Computer Science or Engineering

Job description

Datadog, Inc. is seeking a security leader to own the Bits Code security architecture from design to production.

You will collaborate with engineering, product, and security teams to identify risks and shape the product while building threat models for agent risks like prompt injection. You'll help the team ship secure software quickly by maintaining core libraries, guiding processes, and culture, and working with sandbox teams on execution of untrusted workloads.