Senior Services Architect, Security-Cloud SIEM

About the role

As a Senior Services Architect focused on Security and Cloud SIEM, you will help customers design, implement, and operationalize Datadog’s security capabilities across cloud, infrastructure, application, and log data sources. You will lead structured, outcome-driven professional services engagements delivered through a day-based professional services delivery model, partnering directly with customers through co-development working sessions, architecture workshops, implementation planning, and operational handoff.

Responsibilities

• Design and guide execution of Datadog implementations, focusing on Security and Cloud SIEM deployment, including discovery, requirements gathering, technical architecture, deployment planning, and launch.
• Partner with customers to map security requirements, controls, and monitoring objectives to Datadog capabilities, including frameworks such as NIST 800-53, NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK, SOC 2, PCI, HIPAA, ISO 27001, or similar standards.
• Advise customers on security data strategy, including log source prioritization, parsing, normalization, enrichment, retention, indexing, sensitive data handling, and detection readiness.
• Build, tune, and document security detections, monitors, dashboards, workflows, and runbooks that support incident response, threat investigation, compliance reporting, and operational handoff.
• Translate customer security and compliance objectives into practical implementation plans with clear milestones, dependencies, risks, and measurable outcomes.
• Write automation and design architecture for repeatable deployment templates, security content, and onboarding patterns.
• Manage the technical execution of implementation projects, including scope alignment, delivery planning, session preparation, follow-up actions, and customer communication.
• Collaborate with Customer Success, Technical Account Management, Sales Engineering, Product, and Support teams to deliver an exceptional onboarding experience.
• Act as a trusted advisor to customer security, platform, DevOps, and observability teams by helping them mature their security monitoring, alerting, incident response, and operational processes.

Qualifications

• Experienced designing and delivering technical solutions for Cloud SIEM, security monitoring, security operations, DevOps, observability, cloud architecture, or related systems.
• Hands-on experience with security logging and telemetry sources such as cloud audit logs, identity provider logs, firewall and network logs, endpoint/security tool logs, application logs, Kubernetes audit logs, infrastructure logs, and SaaS audit logs.
• Familiar with cybersecurity practices such as detection engineering, alert triage, incident response, threat investigation, vulnerability management, cloud security, access control, and security operations workflows.
• Able to communicate clearly with both technical and non-technical stakeholders, including security engineers, SOC teams, compliance teams, platform teams, application owners, and executive sponsors.
• Able to translate ambiguous customer requirements into a practical technical implementation plan.
• Able to lead customer-facing workshops, technical discovery conversations, co-development working sessions, and implementation planning discussions.
• Successful track record with 3+ years of experience as an Architect, Consultant, Security Engineer, Security Consultant, Solutions Architect, or similar role in a professional services or customer-facing technical team.
• Able to sit up to 4 hours and travel to and from client sites.
• Able to travel via auto, train, or air up to 30% of the time.

Who You Are

Experienced designing and delivering technical solutions for Cloud SIEM, security monitoring, security operations, DevOps, observability, cloud architecture, or related systems.

Hands-on experience with security logging and telemetry sources such as cloud audit logs, identity provider logs, firewall and network logs, endpoint/security tool logs, application logs, Kubernetes audit logs, infrastructure logs, and SaaS audit logs.

Familiar with cybersecurity practices such as detection engineering, alert triage, incident response, threat investigation, vulnerability management, cloud security, access control, and security operations workflows.

Comfortable mapping technical security controls and monitoring requirements to common frameworks such as NIST 800-53, NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK, SOC 2, PCI, HIPAA, ISO 27001, or similar standards.

Able to communicate clearly with both technical and non-technical stakeholders, including security engineers, SOC teams, compliance teams, platform teams, application owners, and executive sponsors.

Able to translate ambiguous customer requirements into a practical technical implementation plan.

Able to lead customer-facing workshops, technical discovery conversations, co-development working sessions, and implementation planning discussions.

Successful track record with 3+ years of experience as an Architect, Consultant, Security Engineer, Security Consultant, Solutions Architect, or similar role in a professional services or customer-facing technical team.

Able to sit up to 4 hours and travel to and from client sites.

Able to travel via auto, train, or air up to 30% of the time.