Senior Product Security Engineer - AI Agents

Datadog · Alabama, USA, Remote; Arizona, USA, Remote; Arkansas, USA, Remote; Atlanta, Georgia, USA; Boston, Massachusetts, USA; California, USA, Remote; Chicago, Illinois, USA; Colorado, USA, Remote; Connecticut, USA, Remote; Dallas, Texas, USA; Delaware, USA, Remote; Denver, Colorado, USA; District of Columbia, USA, Remote; Florida, USA, Remote; Georgia, USA, Remote; Houston, Texas, USA; Idaho, USA, Remote; Illinois, USA, Remote; Indiana, USA, Remote; Iowa, USA, Remote; Kansas, USA, Remote; Kentucky, USA, Remote; Los Angeles, California, USA; Louisiana, USA, Remote; Maine, USA, Remote; Maryland, USA, Remote; Massachusetts, USA, Remote; Michigan, USA, Remote; Minnesota, USA, Remote; Missouri, USA, Remote; Montana, USA, Remote; Nebraska, USA, Remote; Nevada, USA, Remote; New Hampshire, USA, Remote; New Jersey, USA, Remote; New Mexico, USA, Remote; New York, New York, USA; New York, USA, Remote; Oregon, USA, Remote; Pennsylvania, USA, Remote; Pittsburgh, Pennsylvania, USA; Portland, Oregon, USA; Rhode Island, USA, Remote; San Francisco, California, USA; San Jose, California, USA; Seattle, Washington, USA; South Carolina, USA, Remote; South Dakota, USA, Remote; Tennessee, USA, Remote; Texas, USA, Remote; Utah, USA, Remote; Vermont, USA, Remote; Virginia, USA, Remote; Washington, District of Columbia, USA; Washington, USA, Remote; Wisconsin, USA, Remote · Dev Eng · listed June 10, 2026

The shape of it

Seniority
Senior
Experience asked
5+ years
Where
Hybrid
Stated pay
$192,000 – $240,000 USD
Requirements listed
5
Length
667 words

In the posting’s own words

Bits Code is Datadog’s cloud coding agent which fixes the problems that Datadog surfaces, as automatically as possible. You’ll shape the architecture, tools, processes, and culture that keep security risk very low while working hands-on with the team to ship product features quickly.

What it asks for · 5

  • You have a BS/MS/PhD in Computer Science, Engineering, or a related scientific field, or at least 5+ years of professional experience, with a background in product security, application security, or security architecture.
  • You have experience securing systems that operate across complex trust boundaries.
  • You have experience building and operating full stack systems at scale.
  • You are familiar with security risks in agentic systems and have experience designing against them.
  • You make pragmatic security trade-offs.

What the job covers

  • Own the security architecture and implementation of Bits Code from early design through production operation.
  • Work with engineering, product, infrastructure, and security teams to identify risks and shape the product.
  • Build threat models for new and existing agent risks such as prompt injection.
  • Help the team ship secure software fast by writing and maintaining core libraries, and guiding processes and culture.
  • Work with our sandbox teams on how Bits Code executes untrusted workloads.
  • Be on call. Datadog culture is that you build it, you run it.

Degree language

  • You have a BS/MS/PhD in Computer Science, Engineering, or a related scientific field, or at least 5+ years of professional experience, with a background in product security, application security, or security architecture.

Tools and skills named

Security & compliance
  • Security8×
Cloud & infra
  • Datadog5×

Words the posting leans on

  • security8×
  • culture4×
  • experience4×
  • product4×
  • risks4×
  • bits code3×
  • build3×
  • systems3×
  • agent2×
  • engineering2×
  • operate2×
  • processes2×
  • security architecture2×
  • shape2×
  • ship2×
  • value2×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

The posting, your resume, and the gaps between them. One click loads all three.

More open at Datadog

every open role at Datadog →

How this page was made

An automated read of a public job posting, fetched October 8, 2026 and last changed by Datadog on October 8, 2026. Every list above is pulled from the posting’s own sentences — nothing rewritten, nothing added, no judgment about the role or the company. Counts and seniority are read off the text by rule, so they can be wrong where the posting is unusual. The original is the only thing that binds. Openings close without warning; check the source before spending an evening on it.