Senior Platform Security Engineer

Job description

As a Platform Security Engineer you will partner with different stakeholders across the organization to secure our infrastructure and application components of the Datadog platform. As part of the Platform Security organization we secure the building blocks of Datadog’s applications and infrastructure. We do this by building solutions solving systemic risks making the secure path easier and the insecure path harder. At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them. What You’ll Do: Solve our most challenging cloud infrastructure security & application security problems starting with our core building blocks and golden paths. Enable our engineers to build and ship secure solutions quickly. Build and extend Datadog’s Platform Security solutions. Leverage and influence the direction of Datadog’s products to secure our infrastructure, and provide internal feedback that enables our teams to improve the products for ourselves and our customers. Who You Are: You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience. You don't want to just provide security recommendations, you want to help implement solutions to solve systemic issues. Passionate about advocating for and implementing solutions to complex security problems, at-scale, in a large multi-cloud self-managed Kubernetes environment. Proven experience in securing enterprise SaaS applications including securing the underlying authentication flows, authorization patterns, and input validation at API boundaries. You have hands-on experience with Linux kernel internals (namespaces, cgroups, capabilities, seccomp) and hardening techniques such as KASLR, module allowlisting, or kernel self-protection (KSPP) controls. Experience with virtualization or microVM technologies (KVM, QEMU, Kata Containers, Firecracker, or similar) and the security boundaries a hypervisor provides versus a container. Familiarity with container runtime internals (containerd, OCI runtimes, checkpoint/restore). Demonstrated experience in securing the deployment & management mechanisms for software and infrastructure changes. Familiarity with common security fr…