Senior Security Engineer - DataDome

⭐ About the role :

At DataDome , security is a core part of how we build and scale. Our security team already covers GRC, SecOps, and security leadership, and we are now looking for a senior individual contributor to strengthen the engineering-facing side of the function.

As DataDome evolves from a single product into a broader platform, our security scope is expanding across product, infrastructure, internal systems, and AI-enabled workflows. At the same time, our regulatory and assurance requirements are becoming more demanding, including ISO 27001 and SOC 2.

We are looking for a Senior Security Engineer with a strong technical background, able to work closely with engineering teams and bring practical security expertise to product security, cloud security, application security, secure software supply chain, security tooling, and AI security topics.

This role reports directly to the Head of Security. It is a pure individual contributor position with no management responsibilities. Impact comes from technical depth, hands-on execution, and cross-functional influence.

👉 You will be more specifically in charge of things like...

Product, cloud, and application security

• Contribute to architecture, design, and implementation reviews for new features, services, platform changes, and cloud initiatives.
• Support pragmatic threat modeling and secure-by-design practices across APIs, services, data flows, workloads, and platform components.
• Advise engineering teams on application security, cloud and infrastructure security, and secure software supply chain topics.
• Help teams make sound security trade-offs and support remediation on complex or high-priority topics.

AI security and enablement

• Contribute to the security of AI-related product capabilities, including model, pipeline, data flow, and integration considerations.
• Assess technical security risks related to internal AI usage, including data exposure, acceptable use, and vendor-related concerns, in partnership with the GRC function where relevant.
• Identify practical opportunities to leverage AI in security workflows, including threat analysis, remediation support, security reviews, and compliance-related automation.

Technical risk and security enablement

• Bring strong technical depth to security and risk discussions by helping identify realistic attack paths, assess practical impact and likelihood, and translate findings into pragmatic remediation priorities.
• Partner with the GRC function to ensure risk assessments are supported by strong technical input and connected to concrete engineering actions.
• Explain risks, trade-offs, and recommendations in a way that drives action across engineering and cross-functional teams.
• Make secure practices easier to adopt through clear guidance