Senior Security Engineer I
DigitalOcean3 months ago
Base Salary
$140k - $175k/yr
Responsibilities
- Propose and implement mitigations and defense-in-depth controls for threats identified through virtualization-stack threat modeling.
- Build threat models for the virtualization stack using expertise in systems architecture, kernel security features, and network architecture.
- Assess solution trade-offs and recommend designs that satisfy functional and security requirements.
- Collaborate with development teams to implement remediations protecting customer workloads.
- Mentor software engineering teams on security best practices.
- Help oversee the vulnerability management program and assess the impact of security events and vulnerabilities on DigitalOcean’s fleet.
Requirements
- Deep familiarity with at least one kernel security feature, such as AppArmor, SELinux, or Landlock.
- Hands-on experience assessing the performance implications of code changes to virtualization stacks, especially QEMU and KVM.
- Track record of partnering empathetically and creatively with internal engineering teams on security problems across an entire stack.
- Ability to communicate security topics and vulnerability classes, including memory corruption, privilege escalation, and TOCTOU, and provide actionable direction to product teams.
- Working knowledge of virtualized environments, containerization, and continuous integration and delivery.
- Preferred: 5+ years of writing systems-level code in embedded systems, kernel, assembly, or similar areas.
- Preferred: experience guiding software teams on secure architecture design.
- Preferred: experience writing code for embedded systems such as Raspberry Pi or Arduino.
- Preferred: experience building or reviewing threat models and crafting malicious-user, attacker, and abuse or misuse cases.
- Preferred: understanding of patches and mitigations for hardware side-channel attacks.
- Preferred: familiarity with object-oriented and functional programming concepts, particularly Go, Rust, or C.
Benefits
- Hybrid work arrangement.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Potential bonus and equity compensation, including equity grants upon hire and Employee Stock Purchase Program eligibility.
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.