Senior Security Engineer, Security Incident Response Team

New York · USD 192,000-240,000 / year · 5+ years experience · Full-time · Hybrid · Posted Oct 15, 2026

At a glance

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.

The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining customer trust.
In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats while helping contain incidents quickly.

Partner with Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure appropriate, accurate, high-signal detections.
Triage escalated alerts to determine whether a security incident is occurring or may occur imminently.
Respond to security incidents, whether as an incident commander or as an incident responder.
Make the organization more efficient through building tools and automations that eliminate repetitive processes.
Help improve overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements.
Participate in a light on-call rotation.

Have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains.
Worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform.
Strong understanding of cloud-native threat actor TTPs and corresponding defensive controls, and actively stay up to date with the threat landscape.
Used a wide range of technologies and datasets to detect threats in cloud and enterprise environments.
Experience building and supporting tools for incident response and forensic use cases using Python, Go, or similar programming languages.