Information Security Analyst II - Federal Programs

As an Information Security Analyst II for the Federal Programs team, you will support efforts to respond to U.S. Government regulations and standards, including FedRAMP Rev. 5, FedRAMP 20x, NIST SP 800-53 Rev. 5, the DoD Cloud Computing Security Requirements Guide (CC SRG), and applicable Security Technical Implementation Guides (STIGs) , as applicable. You will provide subject matter expertise for the design, implementation, operations, management, and maintenance of the Datadog product in all aspects of Information Assurance and Information Security as it relates to Datadog’s Federal Programs activities.

This includes being able to assess and mitigate system security threats and risks, validate system security requirements, analyze and collaborate on system security designs, verify compliance with system security requirements, manage the complete internal and external assessment and audit lifecycle, testing, and act as a liaison with other departments and business units to support ongoing system security operations and maintenance.

You will evaluate the suitability of Artificial Intelligence (AI)-backed products for Federal regulated industry customers and you will leverage AI to build automations which will allow Datadog to demonstrate compliance with current and future requirements.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

(Describe role responsibilities here)
Support security efforts in pursuit of U.S. Government certifications and accreditations (FedRAMP, GovRAMP, Cloud Computing SRG).Document Datadog practices to provide transparency to customers, prospects and other stakeholders.

Communicate directly with Datadog customers, prospects and other stakeholders.

Work across security and engineering teams to design, implement, and monitor security and compliance features.

Support assessment and continuous monitoring and reporting activities.

Engage with external stakeholders (auditors, regulators, customers) to clearly explain Datadog’s compliance posture

Design and maintain defensive policies that allow the Datadog security and general engineering teams to move quickly and adapt to an evolving threat landscape.

Synthesize complex customer documents (MSAs, Security Addendums, etc.) into concrete requirements for the Datadog Engineering, Legal and Finance teams.

Use modern tooling to increase the capabilities and efficiency of existing compliance programs.

Who You Are : (Describe role qualifications here)
You have a BS and a minimum 5 years of relevant industry experience

You have a proven track record working in security policy, compliance, information security operations or security consulting

You have a strong understanding of cloud services architecture (Amazon Web Services)
You have demonstrable experience designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP certified and/or DoD Impact Levels ⅘ authorized system. You have managed and/or implemented Federal continuous monitoring activities with external stakeholders

You have demonstrable experience partnering with stakeholder teams to implement standards and procedures that provide business value first while meeting control requirements

You have experience with implementing the Cloud Computing Security Requirements Guide, STIGs, and working with Enterprise Mission Assurance Support Service (eMASS)
You produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation

You have or are able to acquire a certification in compliance with…