Staff AppSec Architect: Scale Security Across Teams

Datadog; Massachusetts; On-site; USD 244,000 - 305,000; Full time

Benefits offered by this job

New hire stock equity (RSUs)

Employee stock purchase plan (ESPP)

Professional development & training

Mentor and buddy program

Inclusive culture & Employee resource‑

groups

Inclusion talks

Mental health benefits

Global benefits

Job summary

Datadog is seeking a Staff Application Security Engineer to shape security at scale across engineering teams. You’ll set frameworks, drive secure-by-default architectures, and partner with multiple teams to implement robust security practices.

You’ll leverage Datadog’s platform—logs, dashboards, and AI-powered features—to measure adoption of secure defaults and communicate risk to leadership. You’ll own threat modeling, API security, and cross-domain security initiatives, translating complex

Qualifications

• Software engineering background with hands-on code review experience.
• Experience with Go, Python, or Rust.
• Strong grounding in OWASP Top 10 and web vulnerabilities (XSS, injections, access control, cryptography).
• Working knowledge of API security and input validation at API boundaries.
• Track record leading threat modeling on complex, multi-team systems.
• Ability to translate business risk into security investment priorities for leadership.

Responsibilities

• Define and drive security standards and secure-by-default solutions as AppSec SME.
• Build security tooling and automation to scale practices across engineering teams.
• Lead threat modeling and risk assessment for high-risk features and platform changes.
• Assess risks from agentic development and AI-powered features in production.
• Prioritize remediation with engineering teams; define API security standards and conduct secure code reviews.
• Identify systemic risks; lead multi-team remediation end-to-end.

Skills

Go

Python

Rust

Threat modeling

Security tooling

Code reviews

Job description

Datadog is seeking a Staff Application Security Engineer to shape security at scale across engineering teams. You’ll set frameworks, drive secure-by-default architectures, and partner with multiple teams to implement robust security practices.

You’ll leverage Datadog’s platform—logs, dashboards, and AI-powered features—to measure adoption of secure defaults and communicate risk to leadership. You’ll own threat modeling, API security, and cross-domain security initiatives, translating complex