Threat Intelligence Engineer II — Hybrid: Detect & Defend

Ascenra; New York, Northern (NY, KY); Hybrid; USD 156,000 - 195,000; Full time

Benefits offered by this job

Healthcare

Dental

Parental planning

Mental health benefits

401(k) plan and match

Paid time off

Fitness reimbursements

Discounted employee stock purchasePlan

Job summary

Datadog is seeking a Security Engineer 2 on the Cyber Threat Intelligence team to identify and operationalize intelligence on threat actors and campaigns. You will translate intelligence into actionable security improvements and influence detection, response, and security strategy through collaboration and technical analysis.

The role is hybrid, with opportunities to work across security and engineering, and to contribute to intelligence-led decision making during incidents and steady-state

Qualifications

• Experienced in writing and presenting operational and technical intelligence for threat detection, response, and security stakeholders.
• Skilled in partnering with detection and response teams to support investigations, improve response playbooks, and prioritize detection opportunities based on adversary tactics, techniques, and procedures (TTPs).
• Familiar with information-sharing communities and able to apply sound judgment when handling and operationalizing TLP-designated intelligence.
• Experienced in identifying and responding to large-scale emerging threats, including supply chain compromises, industry-wide campaigns, and exploitation of newly disclosed vulnerabilities.
• Proficient in developing threat intelligence tooling and automation through software development and scripting.

Responsibilities

• Develop and maintain tooling that automates the collection, processing, analysis, and dissemination of threat intelligence.
• Assess emerging vulnerabilities, threat activity, and security events to help stakeholders understand potential impact to Datadog.
• Conduct threat hunting and infrastructure analysis to identify adversary activity relevant to Datadog and improve defensive controls.
• Partner with security teams to operationalize intelligence into detections, investigations, and response workflows.
• Coordinate with information-sharing communities to gather, evaluate, and disseminate actionable intelligence.
• Produce technical briefings, threat reports, and intelligence products for security and engineering stakeholders.

Skills

Threat intelligence

Threat hunting

Collaboration

Scripting / automation

Job description

Datadog is seeking a Security Engineer 2 on the Cyber Threat Intelligence team to identify and operationalize intelligence on threat actors and campaigns. You will translate intelligence into actionable security improvements and influence detection, response, and security strategy through collaboration and technical analysis.

The role is hybrid, with opportunities to work across security and engineering, and to contribute to intelligence-led decision making during incidents and steady-state