Staff Application Security Engineer

Responsibilities

• Define and drive security standards and secure-by-default solutions across the organization.
• Build security tooling and automation to scale practices and implement robust security observability.
• Lead threat modeling and risk assessments for high-risk features, platform changes, and AI-powered products.
• Partner with engineering teams to prioritize and remediate critical threats and conduct security code reviews.
• Identify systemic security risks and lead complex, multi-team remediation efforts end-to-end.
• Serve as the Application Security subject matter expert for engineering leadership and cross-functional teams.
• Invest in the professional growth and mentorship of AppSec engineers on the team.

Requirements

• Strong software engineering background with hands-on code review experience.
• Proficiency in Go (preferred), Python, or Rust.
• Solid grounding in OWASP Top 10 and web vulnerabilities (XSS, injection, access control, cryptography).
• Experience with SAST and DAST methodologies.
• Working knowledge of API security, including authentication flows and authorization patterns.
• Proven track record of leading threat modeling on complex, multi-team systems.
• Ability to translate business risk into security investment priorities and communicate tradeoffs to stakeholders.

Preferred Qualifications

• Experience implementing secure-by-default frameworks and integrating security into core platforms.
• Familiarity with software supply chain security, including dependency management and build pipeline trust.
• Experience addressing security risks introduced by agentic development and AI-powered features.

Benefits

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP).
• Continuous professional development, product training, and career pathing.
• Inclusive company culture with access to Community Guilds and internal mentor programs.
• Free, global mental health benefits for employees and dependents.
• Competitive global benefits package.

About the Company

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. Trusted globally by Fortune 500 companies, Datadog enables businesses to move faster with clarity and confidence.