Senior Software Engineer - Source Security

Datadog · New York, New York, USA · Security · listed September 22, 2026

The shape of it

Seniority
Senior
Where
Hybrid
Stated pay
$192,000 – $240,000 USD
Requirements listed
7
Length
1,101 words

In the posting’s own words

We are looking for an experienced software engineer to join our CI/CD Security Team within our SDLC Security organization. We work at the intersection of security and engineering infrastructure to secure Datadog's continuous integration and continuous delivery systems. Our responsibilities include hardening pipelines, protecting credentials, and enforcing tightly scoped access controls. We also develop authorization and verification mechanisms to ensure that only trusted code and approved processes can reach production.

What it asks for · 7

  • Fluent in one or more modern programming languages such as Go, Python, Rust, Java, or JavaScript
  • Experienced building reliable, high-throughput systems or infrastructure that sits on the critical path of software delivery
  • Strong understanding of CI/CD architecture and the security boundaries, trust relationships, and infrastructure involved in building and delivering software
  • Comfortable using AI-assisted engineering tools and thoughtful about where they improve velocity, quality, and operational effectiveness
  • Familiar with cloud environments such as AWS, GCP, or Azure and Kubernetes-based infrastructure
  • An excellent communicator and collaborator, able to work through complex technical and architectural problems with a diverse group of stakeholders
  • Comfortable working in a fast-paced, high-growth environment and adapting designs as security requirements, infrastructure, and developer workflows evolve

Also a plus

  • Passionate about building security infrastructure that engineers trust and want to use
  • Experienced with software supply chain security, build systems, provenance, artifact repositories, or CI/CD platforms
  • Familiar with proxying, protocol-aware systems, request interception, or high-performance policy engines
  • Familiar with Linux internals, systems programming, networking fundamentals, or distributed systems

What the job covers

  • Design and build highly performant infrastructure that operates in the critical path of our CI/CD systems
  • Help drive the technical roadmap for trusted build provenance, secure secret access, and real-time rule enforcement at the network layer
  • Partner closely with platform, infrastructure, and developer experience teams to make secure workflows easy to adopt and difficult to bypass
  • Use modern AI-assisted development tools to accelerate engineering, debugging, testing, and analysis
  • Help guide and mentor junior engineers
  • Participate in Datadog’s incident response efforts
  • Have a direct impact on the integrity of our software supply chain and the trustworthiness of how software is built and delivered at Datadog

Tools and skills named

Cloud & infra
  • CI/CD8×
  • Datadog6×
  • AWS
  • Azure
  • Distributed systems
  • GCP
  • Kubernetes
  • Linux
Security & compliance
  • Security11×
Languages
  • Go
  • Java
  • JavaScript
  • Python
  • Rust
Operations & finance
  • Supply chain3×
Product & design
  • Roadmap
Ways of working
  • Testing

Words the posting leans on

  • security11×
  • software10×
  • infrastructure9×
  • systems9×
  • build6×
  • ci/cd6×
  • engineering5×
  • engineers4×
  • secure4×
  • building3×
  • critical path3×
  • experienced3×
  • familiar3×
  • operate3×
  • software delivery3×
  • software supply3×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

The posting, your resume, and the gaps between them. One click loads all three.

More open at Datadog

every open role at Datadog

How this page was made

An automated read of a public job posting, fetched September 22, 2026 and last changed by Datadog on September 22, 2026. Every list above is pulled from the posting’s own sentences — nothing rewritten, nothing added, no judgment about the role or the company. Counts and seniority are read off the text by rule, so they can be wrong where the posting is unusual. The original is the only thing that binds. Openings close without warning; check the source before spending an evening on it.