Senior Security Engineer - Cloud SIEM

About the role

We are looking for a Senior Security Engineer to join Datadog’s Cloud SIEM team. In this role you will translate advanced security research into scalable detection, investigation and response capabilities that protect customers across cloud‑native and enterprise environments.

Key responsibilities

• Research attacker techniques and emerging threats, turning findings into high‑fidelity detection content.
• Design and enhance AI‑powered investigation, threat‑hunting and response workflows for an agentic SOC.
• Own the full lifecycle of threat detections and automated security workflows, from design through deployment and continuous improvement.
• Develop detection rules for cloud platforms, SaaS applications, identity systems, endpoints, networks and other modern attack surfaces.
• Collaborate with Product, Engineering, Security Research and customers to shape roadmap decisions.
• Mentor junior security engineers and drive automation, tooling and data‑driven optimisation.

Required profile

• Several years of experience in detection engineering, incident response, threat hunting or related defensive security disciplines.
• Strong understanding of public cloud environments (AWS, Azure, GCP) and cloud‑native technologies such as Kubernetes, Docker and Terraform.
• Proficiency in detection‑as‑code practices and large‑scale security telemetry analysis.
• Ability to work through ambiguity and partner effectively with cross‑functional teams.

Required skills

• Python
• Go
• AWS
• Azure
• GCP
• Kubernetes
• Docker
• Terraform

What we offer

• Hybrid work model that balances office collaboration with remote flexibility.
• Opportunities to contribute to open‑source projects and publish security research.
• Access to cutting‑edge AI and automation tools for security operations.