Security Engineer 2 - Adversary Simulation Operations
New York, New York, USA
We're looking for engineers with a background in offensive security in the areas of Kubernetes and container security, network penetration testing, application security and cloud infrastructure. Experience with exploit development, social engineering and software development are a plus.
You will be responsible for conducting comprehensive penetration testing of Datadog as an organization, including its applications, platform, and critical corporate and cloud infrastructures identifying vulnerabilities and verifying remediations. You will also have the opportunity to perform red and purple team exercises to help Datadog be prepared against real world threats. To ensure the safety and security of Datadog, you will be implementing rigorous security mechanisms that can detect vulnerabilities early in the SDLC at scale to meet the demand of our growing engineering department.
At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.
What You’ll Do:
- Perform penetration tests and assess the security of applications, infrastructure and cloud environments at scale
- Simulate threat actors to improve Datadog’s readiness against real world threats
- Participate in Bug Bounty management
- Triaging detected vulnerabilities in the SDLC
- Monitor and evaluate Datadog’s external attack surface
- Investigate the impact of emerging vulnerabilities and conduct vulnerability research
- Work closely with engineering teams to mitigate or remediate security vulnerabilities
- Assist in incident response activities
Who You Are:
- You have experience with pentesting cloud based environments, networks, software development technologies, and web applications
- You understand the security principles and experience in assessing security of AWS, Azure, GCP and/or other cloud providers
- You understand the security principles and experience in assessing Kubernetes and container security
- You are comfortable with one or more programming languages (Python, Go, Java, etc.)
- You have a high level of situational and operational awareness and demonstrate competencies in multiple security disciplines
- You have the ability to solve difficult problems, both independently and collaboratively, across distributed teams in a fast, high growth environment
- You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent experience
Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.
Benefits & Growth:
- New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
- Continuous professional development, product training, and career pathing
- Intra-departmental mentor and buddy program for in-house networking
- An inclusive company culture, ability to join our Community Guilds
- Access to Inclusion Talks, our Internal panel discussions
- Free, global Spring Health benefits for employees and dependents age 6+
- Competitive global benefits
Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.