Information Security Analyst II - Federal Programs

About the Role

As an Information Security Analyst II for the Federal Programs team, you will support efforts to respond to U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable Security Technical Implementation Guides (STIGs). You will provide subject matter expertise for the design, implementation, operations, management, and maintenance of the Datadog product in all aspects of Information Assurance and Information Security as it relates to Datadog’s Federal Programs activities.

What You’ll Do

• Support security efforts in pursuit of U.S. Government certifications and accreditations (FedRAMP, GovRAMP, Cloud Computing SRG).
• Document Datadog practices to provide transparency to customers, prospects, and other stakeholders.
• Communicate directly with Datadog customers, prospects, and other stakeholders.
• Work across security and engineering teams to design, implement, and monitor security and compliance features.
• Support assessment and continuous monitoring and reporting activities.
• Engage with external stakeholders (auditors, regulators, customers) to clearly explain Datadog’s compliance posture.
• Design and maintain defensive policies that allow Datadog security and general engineering teams to move quickly and adapt to an evolving threat landscape.
• Synthesize complex customer documents (MSAs, Security Addendums, etc.) into concrete requirements for Datadog Engineering, Legal, and Finance teams.
• Use modern tooling to increase the capabilities and efficiency of existing compliance programs.
• Evaluate the suitability of AI-backed products for Federal regulated industry customers and leverage AI to build automations demonstrating compliance.

Who You Are

• You have a BS and a minimum 5 years of relevant industry experience.
• Proven track record working in security policy, compliance, information security operations, or security consulting.
• Strong understanding of cloud services architecture (Amazon Web Services).
• Demonstrable experience designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP certified and/or DoD Impact Levels 4/5 authorized system.
• Experience managing and/or implementing Federal continuous monitoring activities with external stakeholders.
• Demonstrable experience partnering with stakeholder teams to implement standards and procedures that provide business value first while meeting control requirements.
• Experience implementing the Cloud Computing Security Requirements Guide, STIGs, and working with Enterprise Mission Assurance Support Service (eMASS).
• Ability to produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation.
• Have or are able to acquire a certification in compliance with applicable Government requirements.
• Ability to comply with ITAR and GovCloud requirements (e.g., US Person located within the US).
• Eligibility to obtain US Government Security Clearance in the future, or current active adjudicated Public Trust Background Investigation, is a plus.