Senior Software Engineer - Source Security

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at a high scale - trillions of data points per day — providing always-on alerting, metrics visualization, logs, and application tracing for tens of thousands of companies. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Opportunity We are looking for an experienced software engineer to join our CI/CD Security Team within our SDLC Security organization. We work at the intersection of security and engineering infrastructure to secure Datadog's continuous integration and continuous delivery systems. Our responsibilities include hardening pipelines, protecting credentials, and enforcing tightly scoped access controls. We also develop authorization and verification mechanisms to ensure that only trusted code and approved processes can reach production. In this role, you will shape and build a new security layer for our CI/CD infrastructure and drive its adoption across the engineering organization. You will solve challenging systems problems around trusted build provenance, secure secret delivery, and real-time policy enforcement at high throughput. The work sits directly in the critical path of software delivery, where strong security guarantees have to coexist with low latency, high reliability, and a seamless developer experience. You’ll join at an ideal time to make a big impact, as the need for robust software supply chain security is higher than ever. Datadog is growing rapidly, and AI-assisted development is increasing both the pace of software delivery and the amount of activity flowing through our CI/CD systems. Securing that scale without slowing engineers down requires strong software engineering fundamentals, thoughtful automation, and security controls designed to operate reliably at high throughput. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Design and build highly performant infrastructure that operates in the critical path of our CI/CD systems Help drive the technical roadmap for trusted build provenance, secure secret access, and real-time rule enforcement at the network layer Partner closely with platform, infrastructure, and developer experience teams to make secure workflows easy to adopt and difficult to bypass Use modern AI-assisted development tools to accelerate engineering, debugging, testing, and analysis Help guide and mentor junior engineers Participate in Datadog’s incident response efforts Have a direct impact on the integrity of our software supply chain and the trustworthiness of how software is built and delivered at Datadog Who You Are: Fluent in one or more modern programming languages such as Go, Python, Rust, Java, or JavaScript Experienced building reliable, high-throughput systems or infrastructure that sits on the critical path of software delivery Strong understanding of CI/CD architecture and the security boundaries, trust relationships, and infrastructure involved in building and delivering software Comfortable using AI-assisted engineering tools and thoughtful about where they improve velocity, quality, and operational effectiveness Familiar with cloud environments such as AWS, GCP, or Azure and Kubernetes-based infrastructure An excellent communicator and collaborator, able to work through complex technical and architectural problems with a diverse group of stakeholders Comfortable working in a fast-paced, high-growth environment and adapting designs as security requirements, infrastructure, and developer workflows evolve Bonus points: Passionate about building security infrastructure that engineers trust and want to use Experienced with software supply chain security, build systems, provenance, artifact repositories, or CI/CD platforms Familiar with proxying, protocol-aware systems, request interception, or high-performance policy engines Familiar with Linux internals, systems programming, networking fundamentals, or distributed systems Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. Benefits and Growth:  New hire stock equity (RSUs) and employee stock purchase plan (ESPP) Continuous professional development, product training, and career pathing Intradepartmental mentor and buddy program for in-house networking An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups) Access to Inclusion Talks, our internal panel discussions Free, global mental health benefits for employees and dependents age 6+ Competitive global benefits Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog. To conform to US export control regulations, candidates should be eligible for any required authorizations from the US government. This job is available in various departments within our company; to conform to US export control regulations, some of these roles may require candidates to be eligible for any required authorizations from the US government. #LI-Hybrid Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) p