Staff AppSec Architect: Lead Secure-by-Default Platform

Datadog; Connecticut; On-site; USD 244,000 - 305,000; Full time

Benefits offered by this job

RSUs

ESPP

Mentor program

Career pathing

Inclusion talks

Mental health benefits

Global benefits

Community Guilds

Job summary

Datadog is seeking a Staff Application Security Engineer to define frameworks, drive secure-by-default practices, and lead cross-team security programs at scale. You’ll mentor engineers, shape the AppSec roadmap, and partner with product teams to integrate security into the development lifecycle, including AI-enabled features.

With deep expertise in Go/Python/Rust, OWASP Top 10, API security, and threat modeling, you’ll translate risk into strategic investments and build scalable security

Qualifications

• Hands-on code review across Go, Python, or Rust.
• Level up engineers through design reviews and documentation quality.
• Strong grounding in OWASP Top 10 and web vulnerabilities (XSS, injections, access control).
• Experience with API security, authentication flows, authorization patterns, and input validation.
• Track record of leading threat modeling on complex multi-team systems.
• Experience integrating secure-by-default frameworks with product managers and engineers.
• Ability to translate business risk into security investments and communicate tradeoffs to execs.
• Familiarity with software supply chain security and build pipeline trust.
• Bias toward implementing solutions and driving adoption, not just findings.
• Staying current on security practices, threats, and tooling.

Responsibilities

• Define and drive security standards and secure-by-default solutions as AppSec SME.
• Build tooling and automation to scale security across engineering teams and enable strong observability.
• Lead threat modeling and risk assessment for high-risk features and platform changes.
• Assess risks from agentic development practices and AI-powered features in production.
• Partner with engineering to prioritize and remediate threats, define API security standards, and conduct code reviews.
• Identify systemic risks and lead multi-team remediation end-to-end.
• Collaborate with Cloud & Infrastructure Security on cross-domain problems; be AppSec contact.
• Be the AppSec SME for engineering leadership; provide clear risk guidance.
• Invest in the growth of AppSec engineers on the team.

Skills

Go

Python

Rust

OWASP Top 10

Web vulnerabilities

SAST

DAST

API security

Threat modeling

Security reviews

Job description

Datadog is seeking a Staff Application Security Engineer to define frameworks, drive secure-by-default practices, and lead cross-team security programs at scale. You’ll mentor engineers, shape the AppSec roadmap, and partner with product teams to integrate security into the development lifecycle, including AI-enabled features.

With deep expertise in Go/Python/Rust, OWASP Top 10, API security, and threat modeling, you’ll translate risk into strategic investments and build scalable security