Principal Engineer - Security Products, Security Visibility
DigitalOcean3 months ago
Base Salary
$235k - $294k/yr
Responsibilities
- Define and drive the multi-year roadmap for audit logging, SIEM integration, and unified security visibility across event collection, normalization, enrichment, storage, and customer-facing exposure.
- Design fault-tolerant, high-throughput Go pipelines capable of processing billions of security events per day with guaranteed delivery, low latency, and full auditability.
- Architect a unified security dashboard and control plane aggregating signals from threat detection, IAM, network security, and workload protection.
- Design SIEM integrations with Splunk, Datadog, Chronicle, and Microsoft Sentinel using log exports, streaming APIs, and webhooks.
- Lead the redesign of the audit logging platform to support immutable, tamper-evident, compliance-grade records, retention controls, cross-account federation, and real-time streaming.
- Partner with IAM, Threat Detection, DOKS, Billing, and Platform Engineering to establish consistent, structured, high-fidelity security telemetry.
- Establish organization-wide logging schemas, event taxonomies, and observability engineering practices.
- Lead design reviews, author RFCs, and shape DigitalOcean’s technical direction for cross-cutting platform changes.
- Mentor senior and mid-level engineers through code reviews, architectural guidance, and organizational development.
Requirements
- More than 10 years of software engineering experience, including at least 4 years focused on audit logging, security telemetry, SIEM integration, or high-throughput data pipelines in cloud or IaaS environments.
- Expertise in Go and extensive experience designing gRPC-based microservices.
- Hands-on knowledge of Apache Flink, Apache Kafka, or similar high-volume stream-processing frameworks, including exactly-once semantics, durability, and ordering guarantees.
- Experience developing security visibility platforms, unified control planes, security dashboards, or complex SIEM integrations across cloud environments.
- Understanding of SOC 2, ISO 27001, FedRAMP, and PCI-DSS audit requirements.
- Experience building large-scale distributed systems involving replication, consensus, partitioning, and high reliability.
- Proficiency with Kubernetes, Terraform, SQL, MySQL, and analytical or columnar data stores.
- Track record of leading ambiguous, cross-functional platform initiatives and communicating architectural strategy to senior leadership.
- Experience with OpenTelemetry, OCSF, or other security telemetry standards is preferred.
- Familiarity with threat detection platforms, behavioral analytics, or UEBA systems is preferred.
- Experience building customer-facing security dashboards or compliance reporting tools is preferred.
- Contributions to open-source security, observability, or data pipeline projects are preferred.
Benefits
- Hybrid work arrangement.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning with more than 10,000 courses.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Eligible employees may receive equity grants and participate in the Employee Stock Purchase Program.
- Equal-opportunity workplace with benefits varying by local regulations and preferences.
Tech Stack
About DigitalOcean
DigitalOcean is the AI-Native Cloud purpose-built for the inference and agentic era. Its five-layer integrated platform—spanning GPU and CPU infrastructure, core cloud, inference, data, and managed agent orchestration—is open throughout with no vendor lock-in, giving builders everything they need to start fast, scale production AI workloads, and improve unit economics. More than 650,000 customers and millions of developers globally trust DigitalOcean to build, ship, and scale their applications.