The opportunity
As a Senior Security Engineer within Application Security at Datadog, you will help secure emerging application architectures where established security patterns may not yet exist, including agentic applications, LLM-enabled products, protocol-driven tool use, and untrusted…
What you'll do
Define security models, requirements, and guardrails for emerging application: architectures where established patterns are incomplete or do not yet exist.
Design, implement, and validate practical security controls that reduce risk: in emerging architectures and high-risk system behaviors.
Shape how emerging systems authenticate, authorize actions, isolate: workloads, and access data, applying least-privilege principles throughout.
Partner with product, platform, Infrastructure Security, and other: engineering teams to identify security gaps and embed secure-by-default requirements from early design through production.
Lead threat modeling and security assessments for new and existing products,: focusing on evolving threats, unfamiliar trust boundaries, and new interaction patterns.
Prioritize and drive remediation of emerging security risks, including: continuous security testing where it provides durable coverage, and refine security approaches as architectures and threats evolve.
What they're looking for
- You have 5+ years of experience in software engineering or development in a: collaborative environment, with Go, Rust, or Python experience preferred.
- You have experience in security and/or infrastructure/platform engineering,: with exposure to distributed systems, application platforms, or agent-based architectures.
- You have designed or implemented security controls within application: infrastructure, such as authentication, authorization, API security, zero-trust networking, workload protection, sandboxing, or runtime hardening.
- You understand common application security vulnerabilities and mitigation: techniques, including those relevant to LLM applications and agentic systems; familiarity with LLM frameworks and protocols such as MCP or A2A is a plus.
