Engineering Manager, Cyber Threat Intelligence

About the Role

The Cyber Threat Intelligence team at Datadog is dedicated to proactively staying ahead of threat actors and their tactics, techniques, and procedures (TTPs). Their mission is to help Datadog make intelligence-led decisions to improve its security posture, inform detections in security products, and publish research that enhances the Datadog security brand. As part of the Detection & Threat Intelligence group, this role offers the opportunity to work at the intersection of Datadog’s global information security and security product organizations.

Datadog is seeking an Engineering Manager to lead the Cyber Threat Intelligence team. This team focuses on tracking threat actors, malware, and vulnerabilities relevant to Datadog and its customers, while also contributing to the Datadog Security Labs brand through threat research blogs and conference presentations. This manager will report to the Engineering Manager II of the Detection & Intelligence Group and will foster close partnerships with several teams, including Detection Engineering, Threat Hunting, Incident Response, Trust & Safety, Red team, Product Management, Product Detection Engineering, and Security Products Engineering, to support their intelligence requirements.

At Datadog, the value of office culture – the relationships, collaboration, and creativity it fosters – is recognized. The company operates as a hybrid workplace, enabling Datadogs to achieve a work-life harmony that best suits them.

What You’ll Do

• Develop and lead a team of security researchers responsible for ideating, planning, and executing Datadog's cyber threat intelligence roadmap, encompassing threat hunting, threat intelligence, thought leadership, and actor/malware tracking.
• Build a unified threat research and intelligence effort to track threat actors targeting Datadog and its customers.
• Collaborate with leadership to establish quarterly OKRs that address priority intelligence and research requirements.
• Build and support a Request for Information (RFI) program for intelligence stakeholders.
• Construct and optimize the collection, processing, and dissemination of strategic, tactical, and operational threat intelligence for stakeholders.
• Track, research, and experiment with the latest tactics, techniques, and procedures for attacking and defending integrated production environments with Datadog.
• Develop and maintain tools for automating the collection and analysis of intelligence.
• Create and collaborate with Engineering & Product Management on proof-of-concept products, services, tools, and simulations to demonstrate new capabilities and protections within Datadog environments.
• Evangelize your team’s mission and regularly communicate with teams outside of your organizational structure.
• Work closely with the Community team to develop thought-leadership threat research content for blogs, webinars, and conferences.
• Build partnerships with external organizations dedicated to advancing cybersecurity globally.

Who You Are

• A proven leader with experience leading threat research, cyber threat intelligence, security engineering, or security research teams.
• A technical practitioner with hands-on experience building, investigating, and reporting on threat activity in highly complex environments.
• Experienced in collecting and anticipating intelligence requirements from stakeholders and developing an operational model to produce intelligence products for them.
• Connected to threat intelligence sharing groups and capable of navigating the complexities of intelligence sharing.
• Experienced in leading threat hunts to identify novel threat activity and transforming findings into new detections, intelligence, and threat research publications.
• Comfortable helping build proof-of-concept services, including writing and testing code (e.g., Go, Python, Ruby), deploying code to cloud environments, and monitoring these services.
• You have published blogs on threat intelligence topics, threat research, and spoken at security conferences about your findings.
• A motivating, kind, and humble people leader focused on team growth and happiness, with the ability to develop talent through proper mentorship and performance management, while prioritizing empathy.
• You value correctness and efficiency, meticulously reviewing documentation.

Note: If you’re excited about this role and meet most of the qualifications, we encourage you to apply!

Bonus Points

• Experience leading a cyber threat intelligence group for a cloud-native technology/security vendor.
• Experience setting up and managing a Threat Intelligence Platform (TIP) to centralize intelligence collection, dissemination, and threat research activities.
• Experience responding to large-scale emerging threats and vulnerabilities in a threat intelligence or incident response capacity.
• Experience working with Product Managers and Engineering teams on security products focused on threat detection and threat intelligence.

About Datadog

Datadog (NASDAQ: DDOG) is a global SaaS business known for its growth and profitability. The company is on a mission to break down silos and solve complexity in the cloud age by enabling digital transformation, cloud migration, and infrastructure monitoring for customers’ entire technology stacks. Built by engineers, for engineers, Datadog is used by organizations of all sizes across a wide range of industries. Together, they champion professional development, diversity of thought, innovation, and work excellence to empower continuous growth. Join the pack and become part of a collaborative, pragmatic, and thoughtful people-first community where tough problems are solved, smart risks are taken, and colleagues celebrate one another. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center.

Equal Opportunity at Datadog

Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. They also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Refer to their Candidate Legal Notices for more information.

Datadog endeavors to make its Careers Page accessible to all users. For assistance regarding website accessibility or completing the application process, please complete the provided form. This form is exclusively for accommodation requests and cannot be used to inquire about application status.

Privacy and AI Guidelines

Any information submitted to Datadog as part of an application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on their AI policy, please visit Interviewing at Datadog AI Guidelines.

Key skills/competency

• Cyber Threat Intelligence
• Threat Hunting
• Security Research
• Vulnerability Management
• Incident Response
• Cloud Security
• Python/Go Scripting
• Team Leadership
• Stakeholder Management
• Security Operations