# Senior Application Security Engineer

**Company**: Datadog
**Location**: Paris
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/datadog/jobs/8230663?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_dd47e0ea-10c

## Description

As a Senior Security Engineer within Application Security at Datadog, you will help secure emerging application architectures where established security patterns may not yet exist, including agentic applications, LLM-enabled products, protocol-driven tool use, and untrusted execution environments.

You will establish and validate security models, requirements, and controls while partnering with product and platform teams to develop secure-by-default approaches. Your work will address evolving trust boundaries, agent identity, data access, tool permissions, and runtime behavior through threat modeling, security solutions, and practical implementation.

You will have the opportunity to shape how Datadog safely supports new application paradigms and address emerging security risks before they become systemic.

### Responsibilities

- Define security models, requirements, and guardrails for emerging application architectures where established patterns are incomplete or do not yet exist.

- Design, implement, and validate practical security controls that reduce risk in emerging architectures and high-risk system behaviors.

- Shape how emerging systems authenticate, authorize actions, isolate workloads, and access data, applying least-privilege principles throughout.

- Partner with product, platform, Infrastructure Security, and other engineering teams to identify security gaps and embed secure-by-default requirements from early design through production.

- Lead threat modeling and security assessments for new and existing products, focusing on evolving threats, unfamiliar trust boundaries, and new interaction patterns.

- Prioritize and drive remediation of emerging security risks, including continuous security testing where it provides durable coverage, and refine security approaches as architectures and threats evolve.

### Requirements

- You have 5+ years of experience in software engineering or development in a collaborative environment, with Go, Rust, or Python experience preferred.

- You have experience in security and/or infrastructure/platform engineering, with exposure to distributed systems, application platforms, or agent-based architectures.

- You have designed or implemented security controls within application infrastructure, such as authentication, authorization, API security, zero-trust networking, workload protection, sandboxing, or runtime hardening.

- You understand common application security vulnerabilities and mitigation techniques, including those relevant to LLM applications and agentic systems; familiarity with LLM frameworks and protocols such as MCP or A2A is a plus.

- You bring strong problem-solving skills and can work independently and collaboratively in ambiguous or rapidly evolving problem spaces.

- You have successfully driven security initiatives with engineering and leadership stakeholders and are committed to staying current with security practices, emerging technologies, and evolving threats.

### Benefits and Growth

- New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

- Continuous professional development, product training, and career pathing

- Intradepartmental mentor and buddy program for in-house networking

- An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

- Access to Inclusion Talks, our internal panel discussions

- Free, global mental health benefits for employees and dependents age 6+

- Competitive global benefits

## Skills

### Required
- Go
- Rust
- Python
- security
- infrastructure engineering
- distributed systems
- application platforms
- agent-based architectures
- authentication
- authorization
- API security
- zero-trust networking
- workload protection
- sandboxing
- runtime hardening

### Nice to have
- LLM frameworks
- protocols such as MCP or A2A

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/datadog/jobs/8230663?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)