Senior Security Engineer, Offensive Security

Datadog is seeking a Senior Security Engineer with a focus on Offensive Security for a hybrid role based in New York, NY. The position offers an annual salary range of USD 195,000 to 240,000 and centers on planning, executing, and automating red team exercises while developing AI-first offensive tooling for cloud native environments.

Responsibilities

• Plan and run red team engagements from inception to completion, simulating real threat actors across cloud infrastructure (AWS, GCP), Kubernetes, CI/CD pipelines, and corporate networks.
• Create and maintain custom offensive tooling, automation frameworks, and engagement infrastructure, treating offensive operations as software development work.
• Develop tailored payloads and evasion techniques aligned with Datadog's environment and current defensive controls (EDR, SIEM, network monitoring).
• Increase operational efficiency through automation and AI, accelerating reconnaissance, vulnerability analysis, and reporting workflows.
• Collaborate with the Detection & Response team on purple team exercises to validate detections, improve alert fidelity, and influence threat models.
• Translate offensive findings into concrete improvements by working directly with defensive security and engineering teams to close gaps.

Requirements

• At least 5 years of hands-on offensive security experience, including red teaming, penetration testing, or adversary simulation, with a track record against mature, well-defended environments.
• Proficiency in producing production-quality code (Python, Go, or similar), with the ability to build tools and automate workflows rather than relying solely on off-the-shelf frameworks.
• Deep expertise in at least two of the following areas: macOS security, Linux security, cloud platforms (AWS, GCP, Azure), Kubernetes, or CI/CD pipelines.
• Experience developing evasion techniques against modern defenses and a solid understanding of detections from the blue team perspective.
• Strong communication skills capable of conveying complex offensive findings to both technical and non-technical stakeholders.
• Comfort operating in ambiguity, scoping work independently, prioritizing what matters, and driving projects from prototype to deployed and validated solutions.

Technologies

• AWS
• GCP
• Azure
• Kubernetes
• CI/CD pipelines
• Python
• Go
• EDR
• SIEM

Benefits

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• Interdepartmental mentor and buddy program for in-house networking
• Inclusive culture with access to Datadog Community Guilds (employee resource groups)
• Free global mental health benefits for employees and dependents aged 6 and up
• Competitive global benefits