The Pentest Team, which operates as part of the Resilience Engineering organization, plays a proactive role in securing critical assets, including customer-facing products, internal corporate services, and infrastructure. We don’t just identify vulnerabilities; we help the company understand how they translate into real-world risks and what are the most effective strategies for mitigation. To achieve this, the Pentest Team focuses on three key areas:

Reducing Risk by identifying vulnerabilities, recommending fixes, and validating remediations to actively shrink the attack surface. Sharpening Priorities by providing threat-driven insights to help teams prioritize mitigations and assess risk exceptions with clarity. Supporting Proactive Security, using the team's findings to create new security baselines that all engineers can benefit from, creating new training material, and supporting large-scale mitigation programs to build a stronger security culture.

As a Security Engineer II, you will be at the forefront of these efforts, performing in-depth penetration testing to uncover risks, validate fixes, and contribute to security improvements across Datadog’s most critical assets.

At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.

What You’ll Do:

Conduct threat-driven, in-depth penetration tests to assess high-impact security risks across Datadog’s most critical assets, including customer-facing products, infrastructure, and internal corporate services. Identify, assess, and validate security vulnerabilities, ensuring effective remediation by working with engineering teams when needed. Contribute to security baselines, building new training materials, and supporting large-scale mitigation programs to help teams stay ahead of potential threats. Manage and operate Datadog's Bug Bounty Program, triaging reports, validating findings, and collaborating with researchers to ensure effective remediation and proper escalation of critical issues. Stay ahead of emerging threats, attack techniques, and security trends.

Who You Are:

You have hands-on experience in penetration testing, with a strong understanding of security vulnerabilities, exploitation techniques, and remediation strategies. You have experience testing security across a variety of environments, including web applications, APIs, microservices architectures, containerized environments (Kubernetes, Docker), and cloud platforms (AWS, Azure, GCP). You understand threat modeling and can assess the impact and exploitability of vulnerabilities. You are proficient with the most common offensive security tools such as Burp Suite and Nmap, and leverage custom scripting (Python, Bash, etc.) to support your testing and develop Proof-of-Concept (PoC) exploits. Additionally, you can read and understand Go, JavaScript, and Python. You can clearly communicate security risks and remediation strategies to both technical and non-technical audiences. You thrive in a collaborative environment, working closely with engineers, security teams, and leadership. You are passionate about offensive security, with a proven track record in CTFs, security research, or exploit development. Holding hands-on certifications like OSCP, OSWE, OSEP, or CRTO is another way to showcase your passion and interest. Bonus: You have experience managing and operating Bug Bounty programs, including triaging reports, validating findings, and helping ensure effective remediation to reduce risk and shrink the attack surface.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. 

Benefits and Growth: 

New hire stock equity (RSUs) and employee stock purchase plan (ESPP) Continuous professional development, product training, and career pathing Intradepartmental mentor and buddy program for in-house networking An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups) Access to Inclusion Talks, our Internal panel discussions Free, global mental health benefits for employees and dependents age 6+ Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

About Datadog: 

Datadog (NASDAQ: DDOG) is a global SaaS business, delivering a rare combination of growth and profitability. We are on a mission to break down silos and solve complexity in the cloud age by enabling digital transformation, cloud migration, and infrastructure monitoring of our customers’ entire technology stacks. Built by engineers, for engineers, Datadog is used by organizations of all sizes across a wide range of industries. Together, we champion professional development, diversity of thought, innovation, and work excellence to empower continuous growth. Join the pack and become part of a collaborative, pragmatic, and thoughtful people-first community where we solve tough problems, take smart risks, and celebrate one another. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.

Equal Opportunity at Datadog:

Datadog is an Affirmative Action and Equal Opportunity Employer and is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and more. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference.

Your Privacy:

Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice.