Product Security Engineer, Secure Design
DigitalOcean2 hours ago
Base Salary
$114k - $142k/yr
Responsibilities
- Threat model application designs and solutions and provide security risk assessments.
- Provide technical expertise on software and network architecture across infrastructure, application, people, and process security layers.
- Partner with product managers, designers, and engineers to design secure and resilient systems.
- Identify design trade-offs and recommend solutions that meet functional and security requirements.
- Provide hands-on vulnerability remediation guidance to development teams.
- Promote security culture through developer training, internal CTFs, mentoring, and security guidance.
- Help oversee the vulnerability management and security-debt program.
- Build security tooling, architecture patterns, processes, and workflow integrations to scale Product Security practices.
Requirements
- Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
- Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten, and provide actionable direction to product teams.
- Experience partnering empathetically with internal engineering teams to address security problems across an entire technology stack.
- Working knowledge of virtualized environments, containerization, and continuous integration and delivery.
- Preferred: 3+ years guiding software teams on secure architecture design.
- Preferred: experience building or reviewing threat models and creating malicious-user, attacker, and abuse or misuse cases.
- Preferred: working knowledge of hardware and software supply-chain security.
- Preferred: familiarity with object-oriented and functional programming concepts, particularly in Go, JavaScript, Rust, or C.
Benefits
- Hybrid work arrangement.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses for professional development.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Potential eligibility for performance-based bonuses and equity compensation, including equity grants and an Employee Stock Purchase Program.
Tech Stack
Categories
About DigitalOcean
DigitalOcean is the AI-Native Cloud purpose-built for the inference and agentic era. Its five-layer integrated platform—spanning GPU and CPU infrastructure, core cloud, inference, data, and managed agent orchestration—is open throughout with no vendor lock-in, giving builders everything they need to start fast, scale production AI workloads, and improve unit economics. More than 650,000 customers and millions of developers globally trust DigitalOcean to build, ship, and scale their applications.