Staff AppSec Engineer: Secure-by-Default Platform Equity

Datadog; New York (NY); On-site; USD 244,000 - 305,000; Full time

Benefits offered by this job

RSUs

ESPP

Career development

Mentor program

Inclusive culture

Mental health benefits

Job summary

Datadog is seeking a Staff Application Security Engineer to define the technical direction for application security at scale. You will set frameworks, methodologies, and architectural patterns used by engineering teams across Datadog to adopt secure practices.

You'll lead threat modeling, build scalable security tooling, and drive secure-by-default implementations. Collaboration with cross‑functional teams and a focus on AI-powered security features will be central to this role.

Qualifications

• Software engineering background with hands-on code review experience; Go (preferred), Python, or Rust.
• Solid grounding in OWASP Top 10, web vulnerabilities (XSS, injection, access control, cryptography), SAST, and DAST.
• Working knowledge of API security: authentication flows, authorization patterns, and input validation at API boundaries.

Responsibilities

• Define and drive security standards and secure-by-default solutions, serving as the Application Security subject matter expert.
• Build security tooling and automation that scales security practices across engineering teams, and implement robust security observability to support our threat detection team with meaningful, actionable security signals.
• Lead threat modeling and risk assessment for high-risk features and platform changes.
• Assess and address security risks introduced by agentic development practices and AI-powered product features in production.
• Partner with engineering teams to prioritize and remediate critical threats, define API security standards, and conduct security code reviews.
• Identify systemic security risks; lead complex, multi-team remediation efforts end-to-end.
• Partner with Cloud & Infrastructure Security and other teams across the org on cross-domain problems; be the AppSec point of contact on complex cross-domain problems.
• Serve as the AppSec subject matter expert across Datadog; be the person engineering leadership calls when they need clarity on a hard security problem.
• Deeply invest in the growth of AppSec engineers on the team.

Skills

Go

Python

Rust

Code review

Threat modeling

Security tooling

Security observability

API security

Executive communication

Tools

SAST

DAST

Job description

Datadog is seeking a Staff Application Security Engineer to define the technical direction for application security at scale. You will set frameworks, methodologies, and architectural patterns used by engineering teams across Datadog to adopt secure practices.

You'll lead threat modeling, build scalable security tooling, and drive secure-by-default implementations. Collaboration with cross‑functional teams and a focus on AI-powered security features will be central to this role.