Senior Security Analyst I
DigitalOcean2 months ago
Base Salary
$141k - $176k/yr
Responsibilities
- Threat model application designs and solutions and provide security risk assessments.
- Assess security layers across infrastructure, applications, people, and processes using software and network architecture expertise.
- Collaborate with product managers, designers, and engineers to design secure and resilient systems.
- Identify solution trade-offs and recommend efficient designs that satisfy functional and security requirements.
- Provide hands-on vulnerability remediation guidance to development teams.
- Promote security culture through developer training, internal CTFs, mentoring, and security best practices.
- Help oversee the vulnerability management program and communicate the impact of security events and vulnerabilities.
- Build security tooling and automation and integrate custom tools into engineering workflows.
- Drive security architecture, patterns, and processes across engineering teams.
Requirements
- Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
- Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten, and provide actionable direction to product teams.
- Experience partnering with internal engineering teams to address security problems across an entire technology stack.
- Working knowledge of virtualized environments, containerization, and continuous integration and delivery.
- Preferred: 3+ years guiding software teams on secure architecture design.
- Preferred: experience building or reviewing threat models and creating malicious-user, attacker, and abuse or misuse cases.
- Preferred: working knowledge of hardware and software supply chain security.
- Preferred: familiarity with object-oriented and functional programming concepts and languages such as Go, JavaScript, Rust, or C.
Benefits
- Remote role.
- Competitive benefits, including an Employee Assistance Program, local employee meetups, and flexible time off.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning’s 10,000+ courses.
- Potential performance-based bonus in addition to base salary.
- Equity compensation for eligible employees, including grants upon hire and an Employee Stock Purchase Program.
Tech Stack
Categories
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.