Senior Threat & Incident Response Engineer

Blue Line Search Group; New York (NY); Hybrid; USD 192,000 - 240,000; Full time

Benefits offered by this job

New hire stock equity (RSUs)

Employee stock purchase plan

Career development opportunities

Mentor program

Inclusive workplace culture

Job summary

Datadog is seeking a Security Incident Response team member to operate in a hybrid US-based role. You will detect, triage, and respond to threats, leading incident response efforts and building tooling with Python or Go to improve efficiency.

You will collaborate with threat intelligence and cloud teams to strengthen defenses. You will contribute to post-incident reviews, tabletop exercises, and runbooks, while participating in a light on-call rotation and helping mature cloud-native security

Qualifications

• At least 5 years in security incident response, threat hunting, or security operations.
• Experience with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native tech.
• Proficient in Python or Go for tooling and automation.

Responsibilities

• Partner with Threat Intelligence and Detection Engineering to ensure accurate detections.
• Triage escalated alerts to determine incidents and imminent threats.
• Respond to security incidents as incident commander or responder.
• Build tooling and automations to reduce repetitive tasks.
• Improve security posture via post-incident reviews and runbooks.
• Participate in a light on-call rotation.

Skills

Incident response

Threat hunting

Security operations

Cloud security

Python

Go

Tools

Kubernetes

Docker

Terraform

Job description

Datadog is seeking a Security Incident Response team member to operate in a hybrid US-based role. You will detect, triage, and respond to threats, leading incident response efforts and building tooling with Python or Go to improve efficiency.

You will collaborate with threat intelligence and cloud teams to strengthen defenses. You will contribute to post-incident reviews, tabletop exercises, and runbooks, while participating in a light on-call rotation and helping mature cloud-native security