Senior Security Engineer I
DigitalOcean3 months ago
Base Salary
$140k - $175k/yr
Responsibilities
- Propose and implement mitigations and defense-in-depth protections for threats identified through virtualization-stack threat modeling.
- Build threat models, risk-assessment rubrics, and communication frameworks for the hypervisor and virtualization stack.
- Assess solution trade-offs and recommend designs that satisfy both functional and security requirements.
- Collaborate with development teams to implement remediations protecting customer workloads.
- Mentor software engineering teams on security best practices.
- Help oversee the vulnerability management program and explain the impact of security events and vulnerabilities on DigitalOcean’s fleet.
Requirements
- Deep familiarity with at least one kernel security feature, such as AppArmor, SELinux, or Landlock.
- Hands-on experience assessing performance implications of code changes to virtualization stacks, especially QEMU and KVM.
- Experience partnering with internal engineering teams to solve security problems across an entire stack.
- Ability to explain security topics and vulnerability classes, including memory corruption, privilege escalation, and TOCTOU, and provide actionable guidance.
- Working knowledge of virtualized environments, containerization, and continuous integration and delivery.
- Preferred: 5+ years writing systems-level code in embedded systems, kernel, assembly, or similar environments.
- Preferred: experience guiding software teams on secure architecture design.
- Preferred: experience writing code for embedded systems such as Raspberry Pi or Arduino.
- Preferred: experience building or reviewing threat models and developing attacker, abuse, and misuse cases.
- Preferred: understanding of patches and mitigations for hardware side-channel attacks.
- Preferred: familiarity with object-oriented and functional programming concepts, particularly Go, Rust, or C.
Benefits
- Remote role.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses for career development.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Potential bonus and equity compensation, including equity grants upon hire and an Employee Stock Purchase Program.
- Equal-opportunity employer.
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.