Join Datadog's Security Incident Response Team to protect against cybersecurity threats and improve security posture.
Posted by employer 5 hours ago
First seen on Joblaze 1 hour ago
Last verified on the company career page 1 hour ago
What you'll build
- Identify threats to Datadog
- Triage escalated alerts
- Respond to security incidents
- Build tools and automations
- Conduct post-incident reviews
Must have
- 5+ years of experience in security incident response
- Experience with public cloud platforms
- Strong understanding of cloud-native threat actor TTPs
- Experience building tools for incident response using Python or Go
Practical constraints
- Participate in a light on-call rotation
Requirements
- Experience
- 5+ years
Not disclosed in this posting: visa sponsorship.
Benefits
Joblaze summary
In the role of Senior Security Engineer on the Security Incident Response Team at Datadog, the individual will engage in identifying, triaging, and responding to cybersecurity threats while collaborating with various teams to enhance the company's security posture. Proficiency in cloud platforms like AWS or Azure, along with experience in threat detection and incident response tools, is essential. This position is suited for candidates with at least five years of relevant experience in security operations or incident response. Datadog fosters a collaborative culture, emphasizing continuous learning and improvement.
Joblaze insights
- Listed today — first seen on Joblaze October 16, 2026. Last confirmed on Datadog's careers page October 16, 2026.
- Salary band is above the typical range for Security roles (median ~$170,000).
- Starts above 69% of 100 comparable senior security roles in United States that list Python we track (median $174,500 across 45 companies). See Python salary trends
- Python appears in 41.9% of 320 comparable senior security roles in United States; Docker appears in 2.5% of 320 comparable senior security roles in United States.
Quick facts
- Is the Senior Security Engineer, Security Incident Response Team role remote?
- It's hybrid — Datadog expects some on-site time in New York, New York, United States.
- What's the salary range?
- Datadog lists $192,000–$240,000 for this role.
- How much experience is required?
- At least 5 years of relevant experience for this Senior Security Engineer, Security Incident Response Team role.
- Where is the role based?
- Datadog is hiring for this position in New York, New York, United States.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AWS, Azure, Docker, GCP, Go, Kubernetes.
- What seniority level is this role?
- Datadog targets senior candidates for this position.
- Is this full-time or contract?
- Full-time for this Senior Security Engineer, Security Incident Response Team role at Datadog.
From the original posting
The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining the trust of our customers by ensuring their data remains protected. In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats, ensuring that we can contain any incidents as quickly as possible. You will also contribute to the tools and systems that make us more effective in our mission, and help ensure we have cross-functional learning from incidents to improve our defensive posture going forward.
At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.
What You’ll Do:
- Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats.
- Triage escalated alerts to determine whether a security incident is occurring or may occur imminently.
- Respond to security incidents, whether as an incident commander or as an incident responder
- Make us more efficient through building tools and automations that eliminate repetitive processes
- Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements.
- Participate in a light on-call rotation.
Who You Are:
- You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains.
- You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform.
- You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive controls and actively stay up to date with the threat landscape from various blogs, whitepapers, and conference talks.
- You’ve used a wide range of technologies and datasets to detect threats in cloud and enterprise environments
- You have experience building and supporting tools for incident response and forensic use cases using Python, Go, or similar programming languages.
Benefits and Growth:
- Generous and competitive benefits package
- New hire stock equity (RSUs) and employee stock purchase plan
- Continuous career development and pathing opportunities
- Employee-focused best in class onboarding
- Internal mentor and cross-departmental buddy program
- Friendly and inclusive workplace culture
#LI-Hybrid
Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.
About Datadog:
Standard company text repeated across Datadog's postings is omitted here.