Security Engineer 2, Threat Detection (NorAm) - Datadog

The Threat Detection Engineering team at Datadog develops impactful security detection content for Datadog’s portfolio of security products to protect Datadog. As part of the Security Research organization, you will join a diverse team of hackers and builders who launch impactful security products and research via cross-company collaboration, partnerships with the security community and open source initiatives.

The Opportunity:

As a Detection Engineer II, you will deliver detection content across a wide variety of log integrations, particularly corporate IT datasets, ensuring the detection of threats for Datadog in near real-time. You will creatively identify ways to provide detection coverage across a variation of technology classes such as  endpoint systems, internal networks, SaaS applications, identity management platforms, and many more.  You’ll apply data-driven insights to generate the highest quality security signal for Datadog customers.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Learn everything about detecting threats and vulnerabilities in corporate IT environments and apply that knowledge to strengthen our security practices.
• Research and ideate the most ideal way to operationalize EDR, email and corporate security log telemetry end-to-end from our Logs platform into our Cloud SIEM at scale
• Identify and drive inefficiencies out of content development processes through the creation of innovative tooling, automation; shepherd platform issues impacting content development and user experience through engineering to completion 
• Advocate for yourself and the Datadog security brand through blog posts, documentation, webinars, and workshops. Present at conferences to highlight the challenges and successes in the field

Who You Are:

• A previous background in corporate IT security, detection engineering, or other operational security function
• Experience operating with endpoint systems, identity management platforms, internal network technologies, and other corporate IT infrastructure tools
• Understanding of modern attacker techniques targeting corporate IT environments and familiarity with technical controls to prevent and detect these attacks
• Proficient understanding of macOS and Linux internals and associated telemetry to detect threats at runtime
• Experience detecting threats at scale through a wide variety of corporate IT technologies and datasets using a modern detection engineering approach
• Proficiency with Python, Golang, or other programming languages
• Experience measuring the effectiveness of security controls to make data-driven decisions

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits
• Internal mentor and buddy program cross-departmentally
• Friendly and inclusive workplace culture

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

Last updated: 4 hours ago