Product Security Engineer, Secure Design
DigitalOcean4 hours ago
Boston, MA, USAMid Level
H1B Sponsor
Base Salary
$114k - $142k/yr
Responsibilities
- Threat model application designs and solutions and provide security risk assessments.
- Assess software and network architecture across infrastructure, application, people, and process security layers.
- Collaborate with product managers, designers, and engineers to design secure and resilient systems.
- Identify solution trade-offs and recommend efficient designs that meet functional and security requirements.
- Provide hands-on vulnerability remediation guidance to development teams.
- Champion security culture through developer training, internal CTFs, mentoring, and security best-practice education.
- Help oversee the vulnerability management program and communicate the impact of security events and vulnerabilities to engineers.
- Build security tooling and automation and integrate custom security tools into engineering workflows.
- Drive security-focused architecture, patterns, and processes across engineering.
Requirements
- Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
- Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten, and provide actionable direction to product teams.
- Record of partnering empathetically and creatively with internal engineering teams to solve security problems across an entire stack.
- Working knowledge of modern development concepts including virtualized environments, containerization, and continuous integration and delivery.
- Preferred: 3+ years of experience guiding software teams on secure architecture design.
- Preferred: experience building or reviewing threat models and crafting malicious-user, attacker, and abuse or misuse cases.
- Preferred: working knowledge of hardware and software supply-chain security.
- Preferred: familiarity with object-oriented and functional programming concepts, particularly in Go, JavaScript, Rust, or C.
Benefits
- Remote role.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses.
- Employee Assistance Program, local employee meetups, and flexible time off policy.
- Potential bonus and equity compensation, including equity grants upon hire and an Employee Stock Purchase Program.
Tech Stack
Categories
About DigitalOcean
DigitalOcean is the AI-Native Cloud purpose-built for the inference and agentic era. Its five-layer integrated platform—spanning GPU and CPU infrastructure, core cloud, inference, data, and managed agent orchestration—is open throughout with no vendor lock-in, giving builders everything they need to start fast, scale production AI workloads, and improve unit economics. More than 650,000 customers and millions of developers globally trust DigitalOcean to build, ship, and scale their applications.