Senior Platform Security Engineer

As a Platform Security Engineer you will partner with different stakeholders across the organization to secure our infrastructure and application components of the Datadog platform. As part of the Platform Security organization we secure the building blocks of Datadog’s applications and infrastructure. We do this by building solutions solving systemic risks making the secure path easier and the insecure path harder.

At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.

What You’ll Do:

• Solve our most challenging cloud infrastructure security & application security problems starting with our core building blocks and golden paths.
• Enable our engineers to build and ship secure solutions quickly.
• Build and extend Datadog’s Platform Security solutions.
• Leverage and influence the direction of Datadog’s products to secure our infrastructure, and provide internal feedback that enables our teams to improve the products for ourselves and our customers.
  
  

Who You Are:

• You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience.
• You don't want to just provide security recommendations, you want to help implement solutions to solve systemic issues.
• Passionate about advocating for and implementing solutions to complex security problems, at-scale, in a large multi-cloud self-managed Kubernetes environment.
• Proven experience in securing enterprise SaaS applications including securing the underlying authentication flows, authorization patterns, and input validation at API boundaries.
• You have hands-on experience with Linux kernel internals (namespaces, cgroups, capabilities, seccomp) and hardening techniques such as KASLR, module allowlisting, or kernel self-protection (KSPP) controls.
• Experience with virtualization or microVM technologies (KVM, QEMU, Kata Containers, Firecracker, or similar) and the security boundaries a hypervisor provides versus a container.
• Familiarity with container runtime internals (containerd, OCI runtimes, checkpoint/restore).
• Demonstrated experience in securing the deployment & management mechanisms for software and infrastructure changes.
• Familiarity with common security frameworks such as OWASP, MITRE ATT&CK, PASTA/STRIDE, CIS, etc.
• You have prior experience in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security or Application Security.
• Software engineering background with hands-on code review experience; Go, Python, or Rust
• Experience with one or more Kubernetes PKI & network technologies (Consul, Envoy, Cilium, Vault, Istio, etc.) and eBPF-based tooling.
• Experience with one of the major cloud providers (AWS, Azure, GCP) and Kubernetes.
• Able to work both independently and collaboratively, willing to work in a fast paced, high growth environment.
• You stay updated with modern security best practices, technologies and emerging threats.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Intradepartmental mentor and buddy program for in-house networking
• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
• Access to Inclusion Talks, our Internal panel discussions
• Free, global mental health benefits for employees and dependents age 6+
• Competitive global benefits

#LI-Hybrid