Information Security Analyst II - Federal Programs

Datadog•New York, NY

12h•$116,000 - $145,000•Hybrid

About The Position

The Information Security Analyst II will support Datadog’s Federal Programs by addressing U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable STIGs. The role provides subject matter expertise for the design, implementation, operation, management, and maintenance of Datadog products in information assurance and information security matters related to Federal Programs. The analyst assesses and mitigates system security threats and risks; validates security requirements; reviews system security designs; verifies compliance; manages internal and external assessments and audits; supports testing; and works with other departments and business units on ongoing security operations and maintenance. The role also evaluates AI-backed products for suitability in federally regulated industries and uses AI to create automations that help demonstrate compliance with current and future requirements. The position works across security and engineering teams and engages with customers, prospects, auditors, regulators, and other stakeholders. Datadog describes its workplace as hybrid, emphasizing office culture, collaboration, and work-life harmony.

Requirements

Bachelor of Science degree.
At least 5 years of relevant industry experience.
Proven experience in security policy, compliance, information security operations, or security consulting.
Strong understanding of cloud services architecture, particularly Amazon Web Services.
Demonstrable experience designing, supporting, advising on, and assessing security controls for a FedRAMP-certified and/or DoD Impact Levels 4/5-authorized system.
Experience managing and/or implementing Federal continuous monitoring activities with external stakeholders.
Experience partnering with stakeholder teams to implement standards and procedures that provide business value while meeting control requirements.
Experience implementing the Cloud Computing Security Requirements Guide and STIGs, and working with eMASS.
Ability to produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation.
Have or be able to acquire a certification in compliance with applicable Government requirements.
Ability to comply with ITAR and GovCloud requirements, such as being a U.S. Person located within the United States.

Nice To Haves

Eligibility to obtain a U.S. Government Security Clearance in the future, or a current active adjudicated Public Trust Background Investigation.

Responsibilities

Support security efforts toward U.S. Government certifications and accreditations, including FedRAMP, GovRAMP, and Cloud Computing SRG.
Document Datadog practices to provide transparency to customers, prospects, and other stakeholders.
Communicate directly with Datadog customers, prospects, and other stakeholders.
Work across security and engineering teams to design, implement, and monitor security and compliance features.
Support assessment, continuous monitoring, and reporting activities.
Engage with external stakeholders, including auditors, regulators, and customers, to explain Datadog’s compliance posture.
Design and maintain defensive policies that enable security and engineering teams to move quickly while adapting to an evolving threat landscape.
Translate complex customer documents, such as MSAs and security addendums, into concrete requirements for Engineering, Legal, and Finance teams.
Use modern tooling to improve the capabilities and efficiency of existing compliance programs.
Evaluate AI-backed products for suitability for Federal regulated industry customers and use AI to build compliance automation.
Assess and mitigate system security threats and risks, validate requirements and designs, verify compliance, and manage assessment and audit lifecycles.

Benefits

New-hire stock equity (RSUs) and employee stock purchase plan (ESPP).
Continuous professional development, product training, and career pathing.
Intradepartmental mentor and buddy program for in-house networking.
Inclusive company culture and access to Community Guilds (employee resource groups).
Access to Inclusion Talks, Datadog’s internal panel discussions.
Free global mental health benefits for employees and dependents age 6 and older.
Competitive global benefits, which may vary by country and employment nature.
Healthcare, dental, parental planning, and mental health benefits.
401(k) plan and match.
Paid time off.
Fitness reimbursements.
Discounted employee stock purchase plan.