Director, Security Products: Key Management
DigitalOcean9 hours ago
Base Salary
$230k - $288k/yr
Responsibilities
- Define and drive DigitalOcean’s AI Security strategy, investment priorities, and multi-year roadmap.
- Integrate AI security controls into customer-facing products in partnership with Product Security and Engineering.
- Build, deploy, and monitor AI/ML security models, guardrails, tooling, and automations.
- Lead AI red teaming and adversarial testing, including jailbreak, prompt-injection, evasion, and poisoning tests.
- Conduct AI security reviews and provide architectural sign-off and escalation guidance for high-risk initiatives.
- Threat-model AI systems across data ingestion, training, evaluation, serving, RAG, agent frameworks, and post-deployment monitoring.
- Establish AI risk and governance policies, standards, and controls across DigitalOcean and Cloudways.
- Communicate AI security risk, program progress, and strategic decisions to executives, the board, and senior leadership.
- Represent DigitalOcean in the external AI security community and define positions on emerging AI security topics.
Requirements
- 10+ years of cybersecurity experience, including at least 4–5 years focused on AI/ML security, adversarial machine learning, or security data science in a production cloud or technology environment.
- Organizational-level experience defining and driving AI or security programs and owning strategy.
- Practitioner-level knowledge of adversarial ML attacks and defenses, including evasion, poisoning, model extraction, membership inference, and prompt injection.
- Ability to evaluate AI security research and translate it into engineering guidance and organizational policy.
- Experience communicating technical risk and investment decisions to executive and senior leadership audiences.
- Strong programming skills in Python and Go, including building security tooling, adversarial testing, detection, and guardrail capabilities.
- Experience reviewing AI/ML system architecture, including data ingestion, feature engineering, training pipelines, model serving, and continuous monitoring.
- Hands-on experience with AI red-team and defensive tooling and model supply-chain frameworks.
- Bachelor’s or master’s degree in Computer Science, Information Security, Mathematics, or a related field, or equivalent depth of practical experience.
- Fluency in OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, ISO/IEC 42001, and the EU AI Act.
- Experience at a cloud provider, security product company, or large-scale internet platform operating AI/ML systems at customer-facing scale.
- Familiarity with production LLM security, including securing RAG pipelines, agentic frameworks, and model APIs against prompt injection, jailbreaking, and data exfiltration.
Benefits
- Remote role.
- Competitive benefits, including an Employee Assistance Program, local employee meetups, and flexible time off.
- Reimbursement for relevant conferences, training, and education, plus access to LinkedIn Learning’s 10,000+ courses.
- Potential bonus and equity compensation, including equity grants upon hire and an Employee Stock Purchase Program.
- Equal-opportunity workplace.
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.