Security Engineer II - Vulnerability Lifecycle

Datadog•New York, NY

10d•Hybrid

About The Position

Datadog is seeking a Security Engineer to enhance their vulnerability management lifecycle, focusing on an AI-first approach to risk. The role involves reducing engineering toil, developing automation for detection and remediation, collaborating with various engineering teams to "shift left" on vulnerabilities, and improving the overall efficiency of the vulnerability management process. The engineer will also be responsible for developing metrics and reporting, and providing subject matter expertise for compliance frameworks.

Requirements

Experience with vulnerability management or similar domains like cloud security posture management, SDLC management, etc.
Strong communication skills, with the ability to convey technical information clearly and effectively to both technical and non-technical stakeholders.
Proven track record of managing cross-functional collaboration between security, engineering, and product teams.
Experienced in one or more programming languages (Golang, Python, Java, etc.).
A U.S. person and able to work on ITAR-controlled projects.
BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent experience.

Responsibilities

Reduce engineering toil related to vulnerability remediation through a “PRs, not tickets” approach.
Develop and operate automation to increase detection coverage and remediate root cause issues.
Work with critical partners like SDLC Security, Product Security, and a wide range of engineering teams to “shift left” and reduce upstream vulnerabilities entering our ecosystem.
Improve the efficiency of our overall vulnerability management lifecycle through thoughtful use of automation and AI.
Develop metrics and reporting to provide leadership with an accurate view of overall vulnerability risk.
Provide evidence and subject matter expertise for vulnerability management processes and controls for multiple compliance frameworks (SOC2, HIPAA, PCI, FedRAMP, ISO).

Benefits

New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
Continuous professional development, product training, and career pathing
Intradepartmental mentor and buddy program for in-house networking
An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
Access to Inclusion Talks, our internal panel discussions
Free, global mental health benefits for employees and dependents age 6+
Competitive global benefits
Healthcare
Dental
Parental planning
Mental health benefits
401(k) plan and match
Paid time off
Fitness reimbursements
Discounted employee stock purchase plan