Information Security Analyst II - Federal Programs

As an Information Security Analyst II for the Federal Programs team, you will support efforts to respond to U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable Security Technical Implemen...

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do: (Describe role responsibilities here)

Support security efforts in pursuit of U.S. Government certifications and accreditations (FedRAMP, GovRAMP, Cloud Computing SRG).
Document Datadog practices to provide transparency to customers, prospects and other stakeholders.
Communicate directly with Datadog customers, prospects and other stakeholders.
Work across security and engineering teams to design, implement, and monitor security and compliance features.
Support assessment and continuous monitoring and reporting activities.
Engage with external stakeholders (auditors, regulators, customers) to clearly explain Datadog’s compliance posture
Design and maintain defensive policies that allow the Datadog security and general engineering teams to move quickly and adapt to an evolving threat landscape.
Synthesize complex customer documents (MSAs, Security Addendums, etc.) into concrete requirements for the Datadog Engineering, Legal and Finance teams.
Use modern tooling to increase the capabilities and efficiency of existing compliance programs.

 

You have a BS and a minimum 5 years of relevant industry experience
You have a proven track record working in security policy, compliance, information security operations or security consulting
You have a strong understanding of cloud services architecture (Amazon Web Services)
You have demonstrable experience designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP certified and/or DoD Impact Levels ⅘ authorized system. 
You have managed and/or implemented Federal continuous monitoring activities with external stakeholders
You have demonstrable experience partnering with stakeholder teams to implement standards and procedures that provide business value first while meeting control requirements
You have experience with implementing the Cloud Computing Security Requirements Guide, STIGs, and working with Enterprise Mission Assurance Support Service (eMASS)
You produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation
You have or are able to acquire a certification in compliance with applicable Government requirements
Eligibility to obtain US Government Security Clearance in the future, or current active adjudicated Public Trust Background Investigation, is a plus
Ability to comply with ITAR and GovCloud requirements (e.g., US Person located within the US)

 
Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.
 

Citizen