<div class="content-intro"><p>Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you’ll find your place here. We value winning together—while learning, having fun, and making a profound difference for the dreamers and builders in the world. </p></div><h2><strong>We’re looking for a Senior Product Security Engineer who is passionate about partnering with engineers to assess the security risk of new products and features.</strong></h2> <p>As a member of the Secure Design team, you will report to the Manager of Secure Design. Our Secure Design team enables DigitalOcean to build secure-by-design products. We leverage strong relationships with both product teams and the rest of security engineering to be successful. Our scope is primarily focused on reviewing early-stage decisions, helping develop threat models, scaling impact via automation, curating security patterns, authoring security guidance, training, and championing security initiatives.</p> <p>You will collaborate with other security teams and the rest of DigitalOcean to guide secure architecture design, reduce security risk in the organization, and <a href="https://www.youtube.com/watch?v=BPF18NVKI1A">empower engineers</a> to make informed security decisions. Security at DO means solving incredibly complex problems at a high-scale that have real impact for our customers, our products, and the larger internet community.</p> <h2><strong>W</strong><strong>hat you’ll do:</strong></h2> <p><em>Threat model application designs and solutions and provide security risk assessments (70%)</em></p> <ul> <li>Provide deep technical expertise in software and network architecture during holistic assessments of security layers across infrastructure, application, people, and process.</li> <li>Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.</li> <li>Identify the trade-offs of different solutions and recommend the efficient design to achieve both functional goals and security requirements.</li> <li>Provide hands-on remediation guidance to development teams.</li> </ul> <p><em>Cultivate and promote a security culture (20%)</em></p> <ul> <li>Champion an internal security culture (developer training, internal CTFs, etc.).</li> <li>Mentor software engineering teams in security best practices.</li> <li>Help oversee our vulnerability management program (<a href="https://www.digitalocean.com/blog/digitalocean-security-debt">we call it security debt</a>).</li> <li>Help DigitalOcean engineers understand how security events impact them. Do they need to worry about the next Log4j CVE? How does RetBleed impact DigitalOcean’s fleet?</li> </ul> <p><em>Build security tooling and automations to help scale the Product Security team's practices (10%)</em></p> <ul> <li>Use software architecture and coding patterns to reduce the impact of security issues.</li> <li>Drive architecture, patterns, and processes across engineering that make security the easiest path.</li> <li>Integrate custom security tooling into engineering workflows.</li> </ul> <h2><strong>What you’ll add to DigitalOcean:</strong></h2> <p><strong>Required qualifications:</strong></p> <ul> <li>Experience leading architectural changes or complex cross team efforts to mitigate security vulnerabilities.</li> <li>Ability to clearly communicate security topics and vulnerability classes (e.g. OWASP Top Ten) and ability to provide actionable direction to product teams.</li> <li>A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity. Engineering teams are our partners, not our adversaries.</li> <li>Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery).</li> </ul> <p><strong>Preferred qualifications:</strong></p> <ul> <li>3+ years experience guiding software teams on secure architecture design.</li> <li>Experience building or reviewing threat models and ability to craft malicious user, attacker, and abuse/misuse cases.</li> <li>Working knowledge of hardware and software supply chain security.</li> <li>Familiarity with object oriented and functional programming concepts, particularly with languages such as Go, JavaScript, Rust, or C.</li> </ul> <h2><strong>Compensation Range: </strong></h2> <ul> <li>$140,800 - $176,000</li> </ul> <p><span style="font-weight: 400;">*This is a remote role</span></p> <p><span style="font-weight: 400; color: rgb(0, 0, 0);">JR: 2026-8010</span></p> <p><span style="color: rgb(0, 0, 0);"><em><span style="font-weight: 400;">#LI-Remote</span></em></span></p><div class="content-conclusion"><h2><strong>Why You’ll Like Working for DigitalOcean</strong></h2> <ul> <li><strong>We innovate with purpose. </strong>You’ll be a part of a cutting-edge technology company with a high-growth trajectory, who are proud to simplify cloud and AI so b