Engineering Manager I - Threat Intelligence Research

The Threat Intelligence Research team’s mission is to stay ahead of threat actors and their TTPs to help Datadog make intelligence-led-decisions to improve our security posture, inform detections in our security products, and publish research that elevates the Datadog security brand. As part of the Detection & Threat Intelligence group, you will get to work at the intersection of Datadog’s global information security and security product organizations.

We are looking for an Engineering Manager to lead the Threat Intelligence Research team. This team focuses on tracking threat actors, malware, and vulnerabilities relevant to Datadog and our customers while also growing the Datadog Security Labs brand by publishing threat research blogs and speaking at conferences. This manager will report to the Engineering Manager II of Detection & Threat Intelligence and will partner closely with several teams to support their intelligence requirements, including our Detection and Response Team, Trust & Safety, Red team, Product Management, Product Detection Engineering, and Security Products Engineering.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Develop and lead a team of security researchers who are responsible for ideating, planning and executing the threat intelligence research roadmap at Datadog which includes: threat hunting, threat intelligence, thought leadership and actor/malware tracking.
• Build a unified threat research and intelligence effort to track threat actors targeting Datadog & their customers.
• Work with leadership to set quarterly OKRs that address priority intelligence and research requirements.
• Build and support a RFI program for intelligence stakeholders.
• Build, and optimize the collection, processing and dissemination of strategic, tactical, and operational threat intelligence for intelligence stakeholders.
• Track, research and experiment with the latest tactics, techniques & procedures for attacking and defending integrated production environments with Datadog.
• Develop and maintain tools for automating the collection and analysis of intelligence.
• Create and collaborate with Engineering & Product Management on proof of concept products, services, tools and simulations to demonstrate new capabilities and protections in Datadog environments.
• Evangelize your team’s mission and regularly communicate with teams outside of your organizational structure.
• Work closely with our Community team to develop thought-leadership threat research content for blogs, webinars and conferences.
• Build partnerships with external organizations dedicated to advancing cybersecurity for the world.

Who You Are:

• A proven leader with experience leading threat research, threat intelligence, security engineering or security research teams.
• A technical practitioner who has hands-on experience building, investigating and reporting on threat activity in highly complex environments.
• You have experience with collecting and anticipating intelligence requirements from your stakeholders and building out an operational model to support the production of intelligence products for them.
• Connected to threat intelligence sharing groups and can help navigate the complexities of intelligence sharing.
• You have led threat hunts to identify novel threat activity and turn that into new detections, new intelligence, and threat research publications.
• You are comfortable with helping build proof-of-concept services, which include writing and testing code (e.g. Go, Python, Ruby), deploying code to cloud environments and monitoring of these services.
• You have published blogs on novel threat research and spoken at security conferences on your findings.
• Motivating, kind and humble people leader who focuses on growth and happiness for your team. You have the ability to grow talent by providing a proper mentorship and performance management environment while prioritizing empathy.
• You value correctness and efficiency; you leave no stone unturned when reviewing documentation.

Note: If you’re excited about this role and meet most of the qualifications, we encourage you to apply!

Bonus Points:

• Experience leading a threat intelligence group for a cloud native technology/security vendor.
• Experience setting up and managing a threat intelligence platform (TIP) to centralize intelligence collection, dissemination, and threat research activities.
• Experience responding to large scale emerging threats and vulnerabilities in a threat intelligence or incident response capacity.
• Experience working with Product Managers and Engineering teams on security products focused around threat detection and threat intelligence.

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our Internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits