Senior Product Security Engineer: Build Secure Agent Platforms

Datadog, Inc.; Massachusetts; Hybrid; USD 192,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Healthcare

Dental

Parental planning

401(k) with match

Paid time off

Fitness reimbursements

Employee stock purchase plan

Job summary

Datadog, Inc. is seeking a security-focused leader to own Bits Code security architecture from design through production.

You will collaborate with engineering, product, infra, and security teams to identify risks, shape the product, and build threat models for agent risks like prompt injection. You’ll drive secure libraries and processes while supporting untrusted workload execution in sandbox environments.

Qualifications

• You have a BS/MS/PhD in Computer Science, Engineering, or a related field, or at least 5+ years of professional experience.
• You have experience securing systems that operate across complex trust boundaries.
• You have experience building and operating full stack systems at scale.
• You are familiar with security risks in agentic systems and have experience designing against them.
• You make pragmatic security trade-offs.

Responsibilities

• Own the security architecture and implementation of Bits Code from design to production.
• Work with engineering, product, infrastructure, and security teams to identify risks and shape the product.
• Build threat models for new and existing agent risks such as prompt injection.
• Help the team ship secure software fast by writing and maintaining core libraries, and guiding processes and culture.
• Work with sandbox teams on how Bits Code executes untrusted workloads.
• Be on call; Datadog culture is that you build it, you run it.

Skills

Security architecture

Product security

Full-stack systems

Trust boundary security

Education

BS/MS/PhD in CS or related

Job description

Datadog, Inc. is seeking a security-focused leader to own Bits Code security architecture from design through production.

You will collaborate with engineering, product, infra, and security teams to identify risks, shape the product, and build threat models for agent risks like prompt injection. You’ll drive secure libraries and processes while supporting untrusted workload execution in sandbox environments.