Senior Security Researcher - Application Security Management

<p>We are looking for a Senior Security Researcher to help build our <a href="https://www.datadoghq.com/product/application-security-management/">Application Security Management</a> (ASM) product capability. This role will work directly with our Security Research team, the Director of Security Research, and our Product organization to find novel ways to detect threats and vulnerabilities affecting customer production applications. You will use a combination of Datadog <a href="https://www.datadoghq.com/dg/apm/ts-benefits-os/">APM</a> observability and security data to stop threat actors from attacking our ecosystem of customers. </p> <p>You’ll have an opportunity to influence product direction, find never-before-seen attacks and vulnerabilities, and integrate your findings with our product and our open source initiatives as we scale the ASM product.</p> <p><em>At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.</em></p> <p> </p> <p><strong>What You’ll Do:</strong></p> <ul> <li>Write, deploy, and monitor rule health and performance across our testing, honeypot and customer production infrastructure </li> <li>Work closely with other Detection Engineers, Security Researchers, and Product Managers to identify and prioritize new rules, product features, and areas of improvement</li> <li>Track, research, and experiment with the latest tactics, techniques and procedures for attacking and defending production applications and their corresponding technologies</li> <li>Work closely with the security research team to create Proof-of-Concept (PoCs) methodologies, software and algorithms to combine our observability and security data and find new attacks</li> <li>Research attack chains in production environments using the latest web, DevOps, and cloud applications, and creating tooling and recommendations to attack and defend these platforms</li> <li>Work with cloud, production and software supply-chain data to identify new threats and vulnerabilities</li> <li>Write, create and deliver content for our community such as blog posts, conference talks and webinars<br/><br/></li> </ul> <p><strong>Who You Are:</strong></p> <ul> <li>You have in-depth knowledge of the Web application attack ecosystem, and can comfortably talk about frameworks such as the OWASP Top 10</li> <li>You can create proof of concept attacks in vulnerable environments to emulate detection scenarios using code, and aren’t afraid to learn new software languages</li> <li>You have experience working on teams in the offensive security, application security, security operations, penetration testing or incident response space</li> <li>You are comfortable with DevOps concepts, and can create, modify and emulate production environments using containers, virtual machines and other infrastructure tools</li> <li>You are eager to work for a product organization and making an impact to Datadog customers by protecting them from threat actors</li> <li>You are eager to collaborate with your teammates, colleagues and the security community</li> </ul> <p><em>Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. </em></p> <p> </p> <p><strong>Benefits and Growth:</strong></p> <ul> <li>New hire stock equity (RSUs) and employee stock purchase plan (ESPP)</li> <li>Continuous professional development, product training, and career pathing</li> <li>Intradepartmental mentor and buddy program for in-house networking</li> <li>An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)</li> <li>Access to Inclusion Talks, our Internal panel discussions</li> <li>Free, global mental health benefits for employees and dependents age 6+</li> <li>Competitive global benefits</li> </ul> <p><em>Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.</em></p> <p>#LI-LT1</p> <p><strong>About Datadog: </strong></p> <p>Datadog (NASDAQ: DDOG) is a global SaaS business, delivering a rare combination of growth and profitability. We are on a mission to break down silos and solve complexity in the cloud age by enabling digital transformation, cloud migration, and infrastructure monitoring of our customers’ entire technology stacks. Built by engineers, for engineers, Datadog is used by organizations of all sizes across a wide range of industries. Together, we champion professional development, diversity of thought, innovation, and work excellence to empower continuous growth. Join the pack and become part of a collaborative, pragmatic, and thoughtful people-first community where we solve tough prob