Design and implement scalable threat detection, investigation, and automated response capabilities for Datadog Cloud SIEM. Research attacker techniques, build high-fidelity detection content across cloud, identity, endpoints, and networks, and improve AI-assisted SOC workflows. Own detection lifecycle from research to deployment, collaborate with Product and Engineering, mentor engineers, and contribute to security research and open-source initiatives.

Lead design and development of low-level Linux instrumentation and eBPF-based runtime security features for detection, monitoring, and workload protection. Drive architecture, implement performance-sensitive systems, establish testing methodologies, deliver end-to-end features, and provide technical leadership and cross-team collaboration across Datadog's security products.