Staff AppSec Engineer: Architect of Secure by Default

Nerdleveltech; United States; Hybrid; USD 244,000 - 305,000; Full time

Benefits offered by this job

New hire stock equity (RSUs)

Employee stock purchase plan (ESPP)

Career development & training

Mentor and buddy program

Inclusive culture & ERGs

Global benefits & mental health

Job summary

Datadog is seeking a Staff Application Security Engineer to shape security for applications at scale. You define secure-by-default standards, build scalable tooling, and lead threat modeling for high-risk features across multiple teams.

You will address AI- and agentic-development risks and collaborate closely with engineers, product leaders, and security teams to drive robust security posture. You will mentor AppSec engineers, define API security standards, and communicate tradeoffs clearly to

Qualifications

• Software engineering background with hands-on code review experience.
• Strong knowledge of OWASP Top 10 and web vulnerabilities.
• Experience leading threat modeling on complex systems.

Responsibilities

• Define frameworks, methodologies, and patterns for AppSec at scale.
• Build security tooling and observability to support threat detection.
• Lead threat modeling and risk assessment for high-risk features.
• Address risks from agentic development and AI-powered features.
• Partner with engineering to prioritize and remediate threats and conduct secure code reviews.
• Drive cross-domain security initiatives and mentor AppSec engineers.

Skills

Go

Python

Rust

Threat modeling

Security reviews

Code review

OWASP Top 10

SAST/DAST

Security tooling

Communication to execs

Job description

Datadog is seeking a Staff Application Security Engineer to shape security for applications at scale. You define secure-by-default standards, build scalable tooling, and lead threat modeling for high-risk features across multiple teams.

You will address AI- and agentic-development risks and collaborate closely with engineers, product leaders, and security teams to drive robust security posture. You will mentor AppSec engineers, define API security standards, and communicate tradeoffs clearly to