3 hours ago
Responsibilities
- Manage vulnerabilities from detection and impact assessment through risk-based prioritization, remediation, and verification.
- Build AI-assisted automation, tools, services, and workflows to scale the vulnerability lifecycle.
- Automate finding enrichment, ownership identification, fix recommendations or delivery, and outcome tracking through a “PRs, not tickets” approach.
- Analyze recurring vulnerabilities and remediation failures to identify root causes and prevention opportunities earlier in the software development lifecycle.
- Partner with security, product, platform, compliance, and engineering teams to implement scalable risk-reduction solutions.
- Provide evidence and subject matter expertise for vulnerability management processes and controls across SOC2, HIPAA, PCI, FedRAMP, and ISO frameworks.
Requirements
- Experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments.
- Ability to independently solve complex technical problems using one or more programming languages such as Go, Python, or Java.
- Experience with cloud-native or multi-cloud environments, containers or orchestration platforms, infrastructure as code, and modern software-delivery workflows.
- Experience reproducing and validating externally reported vulnerabilities.
- Ability to make risk decisions using exploitability, exposure, technical context, data, and business impact.
- Ability to work through ambiguity, test assumptions, document tradeoffs, and adjust solutions as information changes.
- Thoughtful use of AI-assisted tools with the ability to validate and explain their output.
- Ability to influence security, engineering, product, and compliance teams through clear communication and technical credibility.
- BS, MS, or PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience.
- Candidates must be eligible for any required US government authorizations under export control regulations.
Benefits
- Hybrid workplace with flexibility intended to support work-life harmony.
- New hire stock equity through RSUs and an employee stock purchase plan.
- Continuous professional development, product training, and career pathing.
- Intradepartmental mentor and buddy program.
- Inclusive company culture, Community Guilds, and access to Inclusion Talks.
- Global mental health benefits for employees and dependents age 6+.
- Competitive global benefits that may vary by country and employment type.
About Datadog
Datadog is the essential monitoring platform for cloud applications. We bring together data from servers, containers, databases, and third-party services to make your stack entirely observable. These capabilities help DevOps teams avoid downtime, resolve performance issues, and ensure customers are getting the best user experience.