Senior Software Engineer - Security Libraries

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale with trillions of data points per day, enabling seamless collaboration and problem-solving among Dev, Ops, and Security teams for tens of thousands of companies globally. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Team The Datadog Security Libraries team owns the customer-side integrations behind our run-time security products App & API Protection , Workload Protection , and Code Security . Our libraries let customers automatically manage application security risk with continuous, real-time monitoring of vulnerabilities and threats against their web applications, serverless applications, and APIs, in production. Automatically integrated with Application Performance Monitoring (APM) distributed tracing and code-level context, our software empowers development, operations, and security teams to build and run secure applications.

As a polyglot team we ship and maintain the security capabilities of Datadog's tracing libraries across .NET , Java , Go , Node.js , Python , Ruby , and PHP , on top of a shared C++ core and a set of HTTP proxy integrations (primarily Envoy, NGINX, and HAProxy). Our code runs inside thousands of production applications around the world. Recent work spans exploit prevention (RASP) and WAF detections, API Security, code security (IAST and SCA), and AI-assisted ("agentic") onboarding, always measured by real product outcomes and operational telemetry. The Opportunity We're looking for a senior, polyglot engineer to contribute across several of our security libraries, with .NET or Java expertise. You'll design and build security integrations and detection features, take them from prototype to production-hardened, and own them operationally as they instrument thousands of applications.

As a senior engineer within a product team, we also expect a strong sense of product engineering : you connect the libraries you build to customer adoption and security value, and you help decide what's worth building. What You'll Do

Design, build, and own security integrations and detections (WAF, RASP/exploit prevention, API Security, IAST, SCA) across multiple libraries, with .NET and/or Java as your primary focus . Take projects from prototype to deployed, correct, operable, and maintainable, writing code that safely instruments thousands of applications in production. Own your systems operationally: monitor production telemetry (e.g., WAF/RASP timeouts, performance and cost), debug challenging cross-system issues, and drive down customer-facing problems. Shape the roadmap: help define the OKRs for the systems you own, break features into components other engineers can build in parallel, and drive designs and RFCs to alignment across our security library