Information Security Analyst II - Federal Programs

Location: New York, New York, USA; hybrid workplace. Ability to comply with ITAR and GovCloud requirements, including being a US Person located within the US, is required.

Salary: $116,000–$145,000 USD per year, plus equity and potential variable compensation.

Company

Datadog provides an observability and security platform that unifies applications, infrastructure, data, models, and security, using AI to detect and resolve issues.

What you will do

• Support U.S. Government certifications and accreditations, including FedRAMP, GovRAMP, and Cloud Computing SRG.
• Design, implement, monitor, and document security and compliance features and practices across security and engineering teams.
• Support assessments, continuous monitoring, reporting, testing, and internal and external audit activities.
• Communicate Datadog’s compliance posture to customers, prospects, auditors, regulators, and other stakeholders.
• Design and maintain defensive policies and translate customer documents such as MSAs and Security Addendums into requirements for Engineering, Legal, and Finance.
• Use modern tooling and AI to improve compliance program capabilities and build automations for current and future requirements.

Requirements

• BS degree and a minimum of 5 years of relevant industry experience.
• Proven experience in security policy, compliance, information security operations, or security consulting.
• Strong understanding of cloud services architecture, including Amazon Web Services.
• Experience designing, supporting, advising on, and assessing security controls for a FedRAMP-certified and/or DoD Impact Levels 4/5-authorized system.
• Experience managing or implementing Federal continuous monitoring activities with external stakeholders.
• Experience partnering with stakeholder teams to implement standards and procedures that provide business value while meeting control requirements.
• Experience implementing the Cloud Computing Security Requirements Guide and STIGs, and working with eMASS.
• Ability to produce accurate, thorough work and identify gaps and inconsistencies in technical and compliance documentation.
• Certification in compliance with applicable Government requirements, or ability to acquire one.
• Ability to comply with ITAR and GovCloud requirements, including being a US Person located within the US.

Nice to have

• Eligibility to obtain US Government Security Clearance in the future.
• Current active adjudicated Public Trust Background Investigation.

Culture & Benefits

• Hybrid workplace designed to support collaboration and work-life harmony.
• New hire stock equity through RSUs and an employee stock purchase plan.
• Continuous professional development, product training, career pathing, mentoring, and buddy programs.
• Inclusive culture with Community Guilds and Inclusion Talks.
• Global mental health benefits for employees and dependents aged 6 and older.
• Benefits may include healthcare, dental, parental planning, 401(k) with match, paid time off, fitness reimbursements, and discounted employee stock purchase plans; offerings vary by country and employment type.