About the position
The Product Detection Engineering team at Datadog develops impactful security detection content for Datadog’s portfolio of security products. As part of the Security Research organization, you will join a diverse team of hackers and builders who launch impactful security products and research via cross-company collaboration, partnerships with the security community and open source initiatives. As a Product Threat Detection Engineer II, you will deliver detection content sourcing a wide variety of data, especially cloud native datasets and workload runtime events, to detect threats for our customers in near real-time. You will creatively identify ways to provide detection coverage across different technology classes such as public cloud platforms, SaaS applications, endpoint and network technologies, and many more. Together with your team, you will research attacker techniques against cloud-native technologies and other attack surfaces to evangelize your findings with the community. You’ll apply data-driven insights to generate the highest quality security signal for Datadog customers. Additionally, you’ll serve as the voice of the customer to continuously provide product feedback through our partner product teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.
Responsibilities
- Learn everything about detecting threats and vulnerabilities in cloud-native environments and pour it back into building a great cloud security product for our customers
- Research and ideate the most ideal way to operationalize telemetry end-to-end from our data platforms into our Cloud SIEM and CSM Threats products as detections at scale
- Partner with product management, engineering, security research and customers to develop roadmaps of content for various integrations and other security concerns
- Identify and drive inefficiencies out of content development processes through the creation of innovative tooling, automation; shepherd platform issues impacting content development and user experience through engineering to completion
- Evangelize yourself and the Datadog security brand through blog posts, documentation, webinars, and workshops. Present at conferences to highlight the challenges and successes in the field
Requirements
- A previous background in detection engineering, cloud security engineering or other operational security function
- Experience operating in at least one public cloud platform (AWS, GCP, Azure) and other cloud native technologies (Kubernetes, Docker, Terraform)
- Understanding of modern cloud native attacker techniques and are familiar with technical controls to prevent and detect these attacks
- Proficient understanding of Windows and Linux internals and associated telemetry to detect threats at runtime
- Vast experience detecting threats at scale through a wide variety of technologies and datasets using a modern detection engineering approach
- Basic proficiency with Python, Golang or other programming languages
- Experience measuring the quantitative and qualitative effectiveness of security controls to make data-driven decisions
Benefits
- New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
- Continuous professional development, product training, and career pathing
- Intradepartmental mentor and buddy program for in-house networking
- An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)
- Access to Inclusion Talks, our internal panel discussions
- Free, global mental health benefits for employees and dependents age 6+
- Competitive global benefits
- Healthcare, dental, parental planning, and mental health benefits
- 401(k) plan and match
- Paid time off
- Fitness reimbursements
- Discounted employee stock purchase plan
