Senior Security Analyst I
DigitalOcean14 hours ago
Base Salary
$141k - $176k/yr
Responsibilities
- Threat-model application designs and solutions and provide security risk assessments.
- Assess security layers across infrastructure, applications, people, and processes using software and network architecture expertise.
- Partner with product managers, designers, and engineers to architect secure and resilient systems.
- Recommend efficient designs that balance functional goals and security requirements.
- Provide hands-on vulnerability remediation guidance to development teams.
- Promote security culture through developer training, internal CTFs, mentoring, and security guidance.
- Help oversee the vulnerability management or “security debt” program.
- Explain how security events and vulnerabilities affect DigitalOcean’s engineering teams and fleet.
- Build security tooling and automations and integrate them into engineering workflows.
- Drive security architecture patterns and processes across engineering.
Requirements
- Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
- Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten, and provide actionable direction to product teams.
- Experience partnering with internal engineering teams to address security problems across an entire technology stack.
- Working knowledge of virtualized environments, containerization, and continuous integration and delivery.
- Preferred: 3+ years guiding software teams on secure architecture design.
- Preferred: experience building or reviewing threat models and creating malicious-user, attacker, and abuse/misuse cases.
- Preferred: working knowledge of hardware and software supply-chain security.
- Preferred: familiarity with object-oriented and functional programming concepts, particularly Go, JavaScript, Rust, or C.
Benefits
- Remote role.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Potential bonus, equity compensation, equity grants upon hire, and Employee Stock Purchase Program.
Tech Stack
Categories
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.