Information Security Analyst II - Federal Programs

As an Information Security Analyst II for the Federal Programs team, you will support efforts to respond to U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable Security Technical Implementation Guides (STIGs) , as applicable. You will provide subject matter expertise for the design, implementation, operations, management, and maintenance of the Datadog product in all aspects of Information Assurance and Information Security as it relates to Datadog’s Federal Programs activities. This includes being able to assess and mitigate system security threats and risks, validate system security requirements, analyze and collaborate on system security designs, verify compliance with system security requirements, manage the complete internal and external assessment and audit lifecycle, testing, and act as a liaison with other departments and business units to support ongoing system security operations and maintenance. You will evaluate the suitability of Artificial Intelligence (AI)-backed products for Federal regulated industry customers and you will leverage AI to build automations which will allow Datadog to demonstrate compliance with current and future requirements.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do: (Describe role responsibilities here)

Support security efforts in pursuit of U.S. Government certifications and accreditations (FedRAMP, GovRAMP, Cloud Computing SRG).

Document Datadog practices to provide transparency to customers, prospects and other stakeholders.

Communicate directly with Datadog customers, prospects and other stakeholders.

Work across security and engineering teams to design, implement, and monitor security and compliance features.

Support assessment and continuous monitoring and reporting activities.

Engage with external stakeholders (auditors, regulators, customers) to clearly explain Datadog’s compliance posture

Design and maintain defensive policies that allow the Datadog security and general engineering teams to move quickly and adapt to an evolving threat landscape.

Synthesize complex customer documents (MSAs, Security Addendums, etc.) into concrete requirements for the Datadog Engineering, Legal and Finance teams.

Use modern tooling to increase the capabilities and efficiency of existing compliance programs.

Who You Are: (Describe role qualifications here)

You have a BS and a minimum 5 years of relevant industry experience

You have a proven track record working in security policy, compliance, information security operations or security consulting

You have a strong understanding of cloud services architecture (Amazon Web Services)

You have demonstrable experience designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP certified and/or DoD Impact Levels ⅘ authorized system.

You have managed and/or implemented Federal continuous monitoring activities with external stakeholders

You have demonstrable experience partnering with stakeholder teams to implement standards and procedures that provide business value first while meeting control requirements

You have experience with implementing the Cloud Computing Security Requirements Guide, STIGs, and working with Enterprise Mission Assurance Support Service (eMASS)

You produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation

You have or are able to acquire a certification in compliance with applicable Government requirements

Eligibility to obtain US Government Security Clearance in the future, or current active adjudicated Public Trust Background Investigation, is a plus

Ability to comply with ITAR and GovCloud requirements (e.g., US Person located within the US)

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth: (Describe opportunities offered here)

New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

Continuous professional development, product training, and career pathing

Intradepartmental mentor and buddy program for in-house networking

An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

Access to Inclusion Talks, our internal panel discussions

Free, global mental health benefits for employees and dependents age 6+

Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

To conform to US export control regulations, candidates should be eligible for any required authorizations from the US government. This job is available in various departments within our company; to conform to US export control regulations, some of these roles may require candidates to be eligible for any required authorizations from the US government.

Datadog offers a competitive salary and equity package, and may include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Datadog offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.

The reasonably estimated yearly salary for this role at Datadog is:

$116,000—$145,000 USD