Engineering Manager I, Threat Detection

What You'll Do

• Lead the strategy, roadmap, and execution of Datadog Security's shift to AI-accelerated detection and response
• Drive development of high-fidelity detections as a shared responsibility across the organization, ensuring your team's systems and direct contributions raise the bar on coverage and signal quality
• Build, mentor, and grow a high-performing team of engineers tackling the hardest problems in threat detection at scale
• Partner with sister teams across Threat Detection and the broader Security organization so your team's deliverables integrate reliably with the rest of the program
• Define and track program metrics: detection coverage, signal quality, model and agent fidelity, evaluation pass rates, incident response readiness, and your team's measurable contribution to security operations outcomes
• Evangelize the team's mission inside and outside the Threat Detection organization, communicating progress, tradeoffs, and bets clearly to security leadership and partner teams
• Collaborate with the AI Engineering teams and other internal AI initiatives to build on shared infrastructure where it makes sense and invest in security-specific tooling where it does not

Who You Are

• Have worked in a security operations, detection engineering, or incident response role, building tooling and performing investigations and responding to incidents
• Strong understanding of modern threat actor techniques and the detection engineering lifecycle
• Technically credible, with the ability to review detection logic, code (e.g., Python), and the architecture of security systems (AI-driven or otherwise)
• Have built automation systems for security operations workflows: detection platforms, AI-driven detection capabilities, case triage, investigation, response automation, or analyst tooling
• Prior experience at a SaaS or cloud infrastructure company where security scale and complexity are first-order challenges
• Operate with both rigor and pragmatism on production quality
• Experienced people leader with a focus on mentorship, team growth, and inclusion

Nice to Haves

• Led or sponsored threat hunts that drove lasting improvements in detection coverage
• Translated security research, threat intelligence, or analyst workflows into engineered systems
• Designed or operated detection platforms: SIEM pipelines, detection-as-code workflows, CI/CD for security content, or equivalent
• Built observability for detection systems: instrumentation for coverage and drift, false positive analysis, or silent failure detection
• Built and shipped agentic or ML systems to production and understand the full lifecycle (data, training, evaluation, deployment, monitoring)
• Designed safety, guardrails, or human-in-the-loop systems for autonomous AI in security domains

Benefits

• Generous and competitive benefits package
• New hire stock equity (RSUs) and employee stock purchase plan
• Continuous career development and pathing opportunities
• Employee-focused best in class onboarding
• Internal mentor and cross-departmental buddy program
• Friendly and inclusive workplace culture