Senior Product Security Engineer, Security Platform
DigitalOcean3 months ago
Bengaluru, IndiaSenior
Responsibilities
- Operate deployed application-security tooling, including SAST, SCA, and secrets management.
- Synthesize security findings into actionable priorities and partner with engineering teams to close identified gaps.
- Develop custom internal Semgrep rules and guardrails for secure engineering practices.
- Build security automation such as AI agents for Trust & Safety or alert pipelines for the SOC.
- Design and build internal tooling, secure-by-default configurations, and libraries for engineering teams.
- Write robust, resilient, and maintainable software primarily in Go and Python, with occasional frontend work.
- Improve the developer experience so security libraries and services are easy and fast for internal development teams to use.
- Collaborate with security teams and DigitalOcean engineering to support secure software design and reduce organizational security risk.
Requirements
- 5+ years of experience in software engineering projects with a security focus.
- Comfort writing robust, well-tested software, primarily in Go, Python, and JavaScript.
- Experience building or reviewing threat models and crafting malicious-user, attacker, and abuse or misuse cases.
- Working knowledge of hardware and software supply-chain security.
- Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten.
- Experience partnering empathetically with internal engineering teams to solve security problems across the stack.
- Familiarity with gRPC, Docker, Prometheus, Kubernetes, HashiCorp Vault, and GitHub Actions is preferred.
- Experience with microservice architectures, asynchronous and event-driven processing, and synchronous gRPC or HTTP-based requests is preferred.
- Strong analytical, communication, and organizational skills are preferred.
Benefits
- Hybrid work arrangement in Bengaluru, India.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Potential bonus and equity compensation, including equity grants upon hire and an Employee Stock Purchase Program.
Tech Stack
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.