Software Engineer II – Threat Intelligence & Detection Experiences (TIDEx)

About Us:

TIDEx builds and operates the infrastructure, automation, and user experiences that power Datadog’s Detection Engineering & Threat Hunting, and Cyber Threat Intelligence teams. We don’t author detection rules or produce threat intelligence ourselves. Instead, we make these teams more effective by:

• Supporting infrastructure, devops, and integration work.
• Delivering automation that scales their workflows.
• Designing intuitive, high-quality user experiences so security teams can focus on their core expertise without friction.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You'll Do:

• Collaborate with security engineers and researchers to help their workflows scale efficiently and reliably.
• Contribute to core systems that collect, process, and deliver data to security teams.
• Build and maintain core components of intelligence infrastructure, including pipelines for ingestion, enrichment, and access to threat information.
• Design and build solutions that provide visibility into detection health, including dashboards and metrics that defenders rely on.
• Provide and optimize data pipelines and datasets that defenders rely on for investigations and validation.
• Develop automation that powers threat hunting at scale, enabling researchers to transform intelligence or reports into executable queries and workflows.
• Write clean, testable, and maintainable code in Go, Python, or other modern languages within a cloud-native environment.
• Learn from and collaborate with senior engineers to improve the reliability, usability, and scalability of our systems.
• Participate in design discussions, code reviews, and technical planning to ensure high-quality engineering outcomes.

Who You Are:

• A software engineer with solid fundamentals and experience building production systems or services.
• Excited to collaborate with security engineers and security researchers, enabling them to focus on research and detection development by removing infrastructure and workflow friction.
• Comfortable with cloud-native engineering (AWS, Azure, GCP) and orchestration (Kubernetes, GitLab CI/CD, infrastructure as code).
• Exposure to or interest in data pipelines, observability platforms, or internal tooling.
• Fluent in one or more modern languages (Python, Go, Java, JavaScript, etc.).
• Values clear communication, teamwork, and a learning-oriented mindset.
• Curious about security technologies and motivated to grow your expertise in threat intelligence, detection engineering, or threat hunting.

Bonus Points:

• Experience with data pipelines, observability platforms, or internal developer tooling.
• Exposure to threat intelligence or detection engineering concepts (e.g., indicator feeds, enrichment, telemetry).
• Interest in building tools that help security teams operate at scale.

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.