Staff AppSec Engineer: Lead Secure-by-Default at Scale

Datadog; New Jersey; On-site; USD 244,000 - 305,000; Full time

Benefits offered by this job

New hire stock equity (RSUs)

Employee stock purchase plan (ESPP)

Professional development

Mentor/buddy program

Inclusion Talks

Mental health benefits

Global benefits

Job summary

Datadog seeks a Staff Application Security Engineer to define frameworks, methodologies, and patterns for security at scale. You will guide engineering teams on secure-by-default practices and lead complex, cross-team security initiatives.

Your role spans threat modeling, API security, and security code reviews across Datadog's platform. You will partner with engineering, security, and leadership to shape the AppSec roadmap, address AI-security implications, and mentor the AppSec team.

Qualifications

• Hands-on code review experience with software engineering background.
• Familiarity with Go, Python, or Rust.
• Strong grounding in OWASP Top 10 and web vulnerabilities.
• Experience leading threat modeling on multi-team systems.

Responsibilities

• Define and drive security standards and secure-by-default solutions, serving as the Application Security subject matter expert.
• Build security tooling and automation that scales security practices across engineering teams, and implement robust security observability to support threat detection.
• Lead threat modeling and risk assessment for high-risk features and platform changes.
• Assess and address security risks introduced by agentic development practices and AI-powered product features in production
• Partner with engineering teams to prioritize and remediate critical threats, define API security standards, and conduct security code reviews.
• Identify systemic security risks; lead complex, multi-team remediation efforts end-to-end
• Partner with Cloud & Infrastructure Security and other teams across the org on cross-domain problems
• Serve as the AppSec subject matter expert across Datadog; be the person engineering leadership calls when they need clarity on a hard security problem
• Deeply invest in the growth of AppSec engineers on the team

Skills

Go

Python

Rust

Security Architecture

Threat Modeling

OWASP Top 10

SAST/DAST

Code Review

Executive Communication

Tools

Security tooling

Job description

Datadog seeks a Staff Application Security Engineer to define frameworks, methodologies, and patterns for security at scale. You will guide engineering teams on secure-by-default practices and lead complex, cross-team security initiatives.

Your role spans threat modeling, API security, and security code reviews across Datadog's platform. You will partner with engineering, security, and leadership to shape the AppSec roadmap, address AI-security implications, and mentor the AppSec team.