Job description

Senior Security Engineer, Vulnerability Management Here at Datadog, we think about vulnerability management a little differently. We embrace open source software, recognize our role in the software supply chain, and see attackers weaponizing vulnerabilities faster than ever. We are looking for a Senior Security Engineer who can combine vulnerability-management judgment with hands-on engineering to help us scale and improve our vulnerability lifecycle across Datadog’s multi-cloud products and services. In this role, you will turn ambiguous security problems into clear solutions, and work with engineering teams to address root causes and develop technical controls that reduce vulnerabilities earlier in the SDLC. You’ll use AI and automation to help scale the overall vulnerability lifecycle across Datadog. You will use data and sound technical judgment to prioritize risk, and partner with security, product, platform, and compliance teams to bring scalable solutions into practice. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do Work across the vulnerability lifecycle from detection and impact assessment through risk-based prioritization, remediation, and verification. Use AI and automation to build tools, services, and workflows that make security ideas concrete, validate them quickly, and create alignment for scalable implementation. Reduce engineering toil through a “PRs, not tickets” approach, using automation to enrich findings, identify ownership, recommend or deliver fixes, and track outcomes. Analyze recurring vulnerabilities and remediation failures to identify root causes and opportunities to prevent issues earlier in the SDLC. Partner with SDLC Security, Product Security, platform teams, and engineering teams to balance technical constraints, business impact, and risk; communicate concerns early and pair problems with actionable options. Provide evidence and subject matter expertise for vulnerability management processes and controls for multiple compliance frameworks (SOC2, HIPAA, PCI, FedRAMP, ISO) Who You Are You have experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments. You can independently solve complex technical problems using one or more programming languages such as Go, Python, or Java. You have experience with cloud-native or multi-cloud environments, containers or orchestration platforms, infrastructure as code, and modern software-delivery workflows. You have experience reproducing and validating externally reported vulnerabilities. You use data, exploitability, exposure, technical context, and business impact to make and explain risk decisions. You are comfortable making progress without a complete specification: you break problems down, test assumptions, fail fast, document tradeoffs, and adjust when new information emerges. You use AI-assisted tools thoughtfully, validate their output, and can explain the reasoning behind your decisions. You influence across security, engineering, product, and compliance teams through clear communication, technical credibility, and solutions that reduce friction. You have a BS/MS/PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That’s okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. Benefits and Growth New hire stock equity (RSUs) and employee stock purchase plan (ESPP) Continuous professional development, product training, and career pathing Intradepartmental mentor and buddy program for in-house networking An inclusive company culture and the ability to join our Community Guilds (Datadog employee resource groups) Access to Inclusion Talks, our internal panel discussions Free, global mental health benefits for employees and dependents age 6+ Competitive global benefits Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog. To conform to US export control regulations, candidates should be eligible for any required authorizations from the US government. This job is available in various departments within our company; to conform to US export control regulations, some of these roles may require candidates to be eligible for any required authorizations from the US government. #LI-Hybrid Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan. The reasonably estimated yearly salary for this role at Datadog is: $192,000 — $240,000 USD About Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram , LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog: Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form . This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines: Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice . For information on our AI policy, please visit Interviewing at Datadog AI Guidelines .

Requirements

Must-haves

Senior Security Engineer, Vulnerability Management
What You’ll Do
Work across the vulnerability lifecycle from detection and impact assessment through risk-based prioritization, remediation, and verification.
Use AI and automation to build tools, services, and workflows that make security ideas concrete, validate them quickly, and create alignment for scalable implementation.
Reduce engineering toil through a “PRs, not tickets” approach, using automation to enrich findings, identify ownership, recommend or deliver fixes, and track outcomes.
Analyze recurring vulnerabilities and remediation failures to identify root causes and opportunities to prevent issues earlier in the SDLC.
Partner with SDLC Security, Product Security, platform teams, and engineering teams to balance technical constraints, business impact, and risk; communicate concerns early and pair problems with actionable options.
Provide evidence and subject matter expertise for vulnerability management processes and controls for multiple compliance frameworks (SOC2, HIPAA, PCI, FedRAMP, ISO)
You have experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments.
You can independently solve complex technical problems using one or more programming languages such as Go, Python, or Java.
You have experience with cloud-native or multi-cloud environments, containers or orchestration platforms, infrastructure as code, and modern software-delivery workflows.
You have experience reproducing and validating externally reported vulnerabilities.
You use data, exploitability, exposure, technical context, and business impact to make and explain risk decisions.
You are comfortable making progress without a complete specification: you break problems down, test assumptions, fail fast, document tradeoffs, and adjust when new information emerges.
You use AI-assisted tools thoughtfully, validate their output, and can explain the reasoning behind your decisions.
You influence across security, engineering, product, and compliance teams through clear communication, technical credibility, and solutions that reduce friction.
You have a BS/MS/PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience
Benefits and Growth
New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
Continuous professional development, product training, and career pathing
Intradepartmental mentor and buddy program for in-house networking
An inclusive company culture and the ability to join our Community Guilds (Datadog employee resource groups)
Access to Inclusion Talks, our internal panel discussions
Competitive global benefits

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigopythonjavaaccessibility

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

401(K)

Paid Time Off

Professional Development