Security Engineer - Vulnerability Management

Datadog is seeking a skilled Software Engineer with a solid security background to join our Vulnerability Management team in our growing multi-provider ecosystem.

You will design, develop, and maintain tools that identify and drive remediation for vulnerabilities discovered across Datadog's multi-cloud products and services, automating vulnerability management processes, from detection to remediation, while providing deep insights into Datadog's security posture. You will collaborate with various security, engineering, and compliance teams to understand technical constraints, architect solutions that reduce risk at scale, and develop automated reporting capabilities for multiple compliance frameworks. Additionally, you will support customer-facing security inquiries and help communicate our security posture to external stakeholders.

At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.

What You’ll Do: 

• Develop, deploy, and maintain services that detect vulnerabilities and drive remediation across multi-cloud platforms
• Support vulnerability impact assessment, root cause analysis, and identify strategic opportunities for security posture improvement
• Build integrations with security scanning tools, CI/CD pipelines, and remediation workflows
• Create systems for vulnerability ownership identification, SLA tracking, and cross-team collaboration to ensure timely remediation
• Architect solutions for handling high-volume vulnerability data with sophisticated filtering, correlation and false positive reduction capabilities
• Develop metrics and reporting platforms that provide visibility into vulnerability management program effectiveness
• Build automation tools that enable "golden path" remediation workflows and self-service capabilities for engineering teams
• Design systems that support compliance evidence collection for multiple frameworks (SOC2, HIPAA, PCI, FedRAMP, ISO)
• Collaborate with Technical Support teams to communicate security capabilities and respond to security inquiries
  

Who You Are: 

• You are naturally curious about security, stay current with the evolving threat landscape, and have a deep understanding of security processes and frameworks. Whether you come from security engineering, software engineering with security focus, or DevSecOps, you thrive on understanding the "why" behind security decisions and enjoy diving deep into complex security challenges
• You have 5+ years of software engineering experience with solid knowledge of vulnerability management, including CVE analysis, risk assessment, and remediation workflows
• You have practical experience with vulnerability scanners, security tooling, and understanding of attack vectors and exploit techniques
• You are proficient in multiple programming languages (we primarily use Golang, Python, Java)
• You have experience with cloud-native architectures, container orchestration, infrastructure as code, and multi-cloud environments
• You understand the full software development lifecycle and can integrate security controls throughout CI/CD pipelines
• You demonstrate strong system design skills and can architect solutions that scale across large, distributed organizations
• You are able to work independently and collaboratively, and communicate effectively with both technical and non-technical stakeholders in a fast-paced environment
• You have a BS/MS in Computer Science, Engineering or related technical field or equivalent experience