Security Engineer - Security Incident Response

The Security Incident Response team plays a vital role in keeping Datadog safe from security threats by maintaining the stability and integrity of our systems and data. In this role you will work with engineers across Datadog to identify, triage, and effectively respond to a wide array of security threats, ensuring that we contain and regain control as fast as possible. You will build tools and systems to help us realize our mission. The team is also responsible for analyzing and helping Datadog learn from its security incidents, working cross-functionally to ensure we have long-term remediations in place.
At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.
What You'll Do:

• Investigate, contain and remediate security threats to the company when an incident is declared. Lead under pressure, make decisions in ambiguous situations, and collaborate across several teams to drive towards resolution.
• Triage automated alerts and signals in Datadog Cloud SIEM so we can respond to emergent threats that affect Datadog's security. Work with our Threat Detection team to tune and calibrate these signals so they're maximizing value.
• Support other Datadog teams to understand the potential security impact of incidents and serve as a first port of call when people need assistance.
• Build tools, systems, and programs to improve our IR capabilities and strengthen Datadog's overall security posture.
• Conduct post-incident analysis to allow Datadog to learn from its security incidents, ensuring postmortems are blameless and actionable. Ensure we are capturing follow-up items that repairs systematic issues and prevents repeated patterns of issue.
• Work with other security teams within Datadog to develop strategies and plans to prevent future security incidents.
• Create regular training and drills for the incident response team to ensure readiness in the event of a security incident. Participate in purple team exercises, tabletops and cross-functional game days with other security teams.
• Coach and mentor team members in day-to-day activities and serve as an ambassador for the team across Datadog to advocate our mission.
• Stay up-to-date with the latest security trends, threats and technologies to ensure Datadog is prepared to respond to any type of security incident.

Who You Are:

• Around 5 years experience in security incident response positions, especially for incidents involving multiple teams and departments.
• Strong understanding of security technologies and systems, including firewalls, intrusion detection systems, anti-virus software, and authentication systems.
• Familiarity with Kubernetes and distributed systems in the cloud, along with an understanding of their potential failure scenarios, vulnerabilities and threats that might affect them.
• Experience with post-incident analysis and writing postmortems to help the organization learn from incidents. An ability to work cross-functionally to identify and solve systemic problems.
• Experience building and maintaining tools to assist with incident response and other security tasks. We mainly use Go and Python.
• Strong ownership and an ability to work outside your comfort zones to return Datadog to a stable state when failure does occur, even if it falls outside team boundaries.
• Empathy, collaboration, and excellent communication skills to cultivate strong relationships across various teams in the organization.
• You have the ability to understand and work within complex, large environments.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our Internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.
#LI-LT1
About Datadog:
Datadog (NASDAQ: DDOG) is a global SaaS business, delivering a rare combination of growth and profitability. We are on a mission to break down silos and solve complexity in the cloud age by enabling digital transformation, cloud migration, and infrastructure monitoring of our customers' entire technology stacks. Built by engineers, for engineers, Datadog is used by organizations of all sizes across a wide range of industries. Together, we champion professional development, diversity of thought, innovation, and work excellence to empower continuous growth. Join the pack and become part of a collaborative, pragmatic, and thoughtful people-first community where we solve tough problems, take smart risks, and celebrate one another. Learn more about #DatadogLife on Instagram , LinkedIn, and Datadog Learning Center.
Equal Opportunity at Datadog:
Datadog is an Affirmative Action and Equal Opportunity Employer and is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and more. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.
Your Privacy:
Any information you submit to Datadog as part of your application will be processed in accordance with Datadog's Applicant and Candidate Privacy Notice .