Senior Security Engineer, Vulnerability Management | Datadog

Datadog approaches vulnerability management differently: it embraces open source, recognizes its role in the software supply chain, and sees attackers weaponizing vulnerabilities faster than ever. As a Senior Security Engineer, you will combine vulnerability-management judgment with hands-on engineering to scale and improve the vulnerability lifecycle across Datadog’s multi-cloud products and services. You will turn ambiguous security problems into clear solutions, work with engineering teams on root causes and technical controls that reduce vulnerabilities earlier in the SDLC, and use AI and automation to scale the process.

Key Responsibilities

• Work across the vulnerability lifecycle, from detection and impact assessment through risk-based prioritization, remediation, and verification
• Use AI and automation to build tools, services, and workflows that make security ideas concrete, validate them quickly, and build alignment for scalable implementation
• Reduce engineering toil with a “PRs, not tickets” approach, using automation to enrich findings, identify ownership, recommend or deliver fixes, and track outcomes
• Analyze recurring vulnerabilities and remediation failures to find root causes and ways to prevent issues earlier in the SDLC
• Partner with SDLC Security, Product Security, platform teams, and engineering teams to balance technical constraints, business impact, and risk, raising concerns early with actionable options
• Provide evidence and subject matter expertise for vulnerability management processes and controls across compliance frameworks (SOC 2, HIPAA, PCI, FedRAMP, ISO)

Requirements

• Experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments
• Ability to solve complex technical problems independently in one or more programming languages, such as Go, Python, or Java
• Experience with cloud-native or multi-cloud environments, containers or orchestration platforms, infrastructure as code, and modern software-delivery workflows
• Experience reproducing and validating externally reported vulnerabilities
• Ability to use data, exploitability, exposure, technical context, and business impact to make and explain risk decisions
• Comfort making progress without a complete specification: breaking down problems, testing assumptions, documenting trade-offs, and adjusting as new information emerges
• Thoughtful use of AI-assisted tools, with validated output and clear reasoning behind decisions
• Ability to influence across security, engineering, product, and compliance teams through clear communication and technical credibility
• BS, MS, or PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience
• Eligibility for any authorizations required by US export control regulations

Skills

Technical Skills

• Vulnerability management and risk-based prioritization
• Go, Python, or Java
• Cloud-native and multi-cloud environments, containers, and infrastructure as code
• Vulnerability reproduction and validation
• AI-assisted automation
• Compliance frameworks (SOC 2, HIPAA, PCI, FedRAMP, ISO)

Soft Skills

• Influence across security, engineering, product, and compliance teams
• Clear communication of risk and trade-offs
• Problem solving under ambiguity
• Sound technical judgment

Benefits

• New hire stock equity (RSUs) and an employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Mentor and buddy program
• Inclusive culture with Community Guilds (employee resource groups) and Inclusion Talks
• Free global mental health benefits for employees and dependents age 6+
• Competitive benefits, which may include healthcare, dental, parental planning, a 401(k) plan with match, paid time off, and fitness reimbursements (varies by country and employment type)