Staff Product Security Engineer

Responsibilities

• Propose and implement mitigations and defense-in-depth to threats discovered through threat modeling the virtualization stack
• Provide deep technical expertise in systems architecture, kernel security features, and network architecture
• Identify trade-offs of different solutions and recommend efficient designs that balance functional goals and security requirements
• Collaborate with development teams to implement remediations and defense in depth
• Mentor software engineering teams in security best practices
• Help oversee the vulnerability management program

Requirements

• Deep familiarity with at least one kernel security feature (e.g., AppArmor, SELinux, Landlock)
• Hands-on experience assessing performance implications of code changes to virtualization stacks (specifically Qemu and KVM)
• Proven record of partnering with engineering teams to tackle security problems
• Ability to communicate security topics and vulnerability classes like memory corruption and privilege escalation
• Working knowledge of virtualized environments, containerization, and CI/CD

Preferred Qualifications

• 5+ years of writing systems level code (embedded systems, kernel, assembly)
• Experience guiding software teams on secure architecture design
• Experience writing code for embedded systems (Raspberry Pi, Arduino, etc.)
• Experience building or reviewing threat models and crafting attacker/abuse cases
• Understanding of patches and mitigations for hardware side-channel attacks
• Familiarity with Go, Rust, or C

About the Company

DigitalOcean is a cloud provider focused on simplifying cloud and AI for builders. We value a growth mindset and a bias for action to build the simplest scalable cloud.