Senior Security Engineer, Vulnerability Management | Datadog

The Briefed; Boston (MA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

New hire stock equity (RSUs) and ESPP

Professional development and career路径

Mentor and buddy program

Inclusive culture with Community Guild

Free global mental health benefits for

Job summary

Datadog is seeking a Senior Security Engineer to drive vulnerability management across its multi-cloud products. You will translate ambiguous security problems into concrete solutions, working with engineering teams on root causes and implementing technical controls that reduce vulnerabilities early in the SDLC.

You will apply AI and automation to scale processes, prioritize work based on risk, and communicate trade-offs clearly to security, engineering, product, and compliance teams.

Qualifications

• Experience identifying, prioritizing, and remediation of vulnerabilities in large software/cloud environments.
• Ability to solve complex problems in Go, Python, or Java.
• Experience with cloud-native/multi-cloud environments and IaC.
• Experience reproducing and validating externally reported vulnerabilities.
• Data-driven risk decisions using exploitability, exposure, and business impact.
• Ability to work with ambiguity and communicate trade-offs.

Responsibilities

• Work across the vulnerability lifecycle from detection to verification.
• Use AI and automation to build security tools and workflows.
• Reduce toil with PRs, not tickets, and track outcomes.
• Analyze recurring vulnerabilities to identify root causes.
• Collaborate with SDLC Security, Product Security, platform and engineering teams.
• Provide evidence for vulnerability management processes across compliance frameworks.

Skills

Vulnerability management

Go, Python, or Java

Cloud-native / multi-cloud

Vulnerability reproduction & Val id at

AI-assisted automation

Compliance frameworks (SOC 2, HIPAA, 1

Cross-team influence & communication

Education

BS/MS/PhD in CS/Engineering or related field

Job description

Datadog approaches vulnerability management differently: it embraces open source, recognizes its role in the software supply chain, and sees attackers weaponizing vulnerabilities faster than ever. As a Senior Security Engineer, you will combine vulnerability-management judgment with hands‑on engineering to scale and improve the vulnerability lifecycle across Datadog’s multi‑cloud products and services. You will turn ambiguous security problems into clear solutions, work with engineering teams on root causes and technical controls that reduce vulnerabilities earlier in the SDLC, and use AI and automation to scale the process.

Key Responsibilities

• Work across the vulnerability lifecycle, from detection and impact assessment through risk‑based prioritization, remediation, and verification
• Use AI and automation to build tools, services, and workflows that make security ideas concrete, validate them quickly, and build alignment for scalable implementation
• Reduce engineering toil with a “PRs, not tickets” approach, using automation to enrich findings, identify ownership, recommend or deliver fixes, and track outcomes
• Analyze recurring vulnerabilities and remediation failures to find root causes and ways to prevent issues earlier in the SDLC
• Partner with SDLC Security, Product Security, platform teams, and engineering teams to balance technical constraints, business impact, and risk, raising concerns early with actionable options
• Provide evidence and subject matter expertise for vulnerability management processes and controls across compliance frameworks (SOC 2, HIPAA, PCI, FedRAMP, ISO)

Requirements

• Experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments
• Ability to solve complex technical problems independently in one or more programming languages, such as Go, Python, or Java
• Experience with cloud‑native or multi‑cloud environments, containers or orchestration platforms, infrastructure as code, and modern software‑delivery workflows
• Experience reproducing and validating externally reported vulnerabilities
• Ability to use data, exploitability, exposure, technical context, and business impact to make and explain risk decisions
• Comfort making progress without a complete specification: breaking down problems, testing assumptions, documenting trade‑offs, and adjusting as new information emerges
• Thoughtful use of AI‑assisted tools, with validated output and clear reasoning behind decisions
• Ability to influence across security, engineering, product, and compliance teams through clear communication and technical credibility
• BS, MS, or PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience
• Eligibility for any authorizations required by US export control regulations

Skills

Technical Skills

• Vulnerability management and risk‑based prioritization
• Go, Python, or Java
• Cloud‑native and multi‑cloud environments, containers, and infrastructure as code
• Vulnerability reproduction and validation
• AI‑assisted automation
• Compliance frameworks (SOC 2, HIPAA, PCI, FedRAMP, ISO)

Soft Skills

• Influence across security, engineering, product, and compliance teams
• Clear communication of risk and trade‑offs
• Problem solving under ambiguity
• Sound technical judgment

Benefits

• New hire stock equity (RSUs) and an employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Mentor and buddy program
• Inclusive culture with Community Guilds (employee resource groups) and Inclusion Talks
• Free global mental health benefits for employees and dependents age 6+
• Competitive benefits, which may include healthcare, dental, parental planning, a 401(k) plan with match, paid time off, and fitness reimbursements (varies by country and employment type)