DigitalOcean is hiring a Product Security Engineer (Secure Design) to collaborate with product and engineering teams to threat model application designs, provide security risk assessments, guide secure architecture and remediation, cultivate internal security culture, and build tooling and automations. The role reports to the Manager of Secure Design and is a hybrid position based in Seattle.

DigitalOcean is hiring a Product Security Engineer (Secure Design) to partner with product and engineering teams to threat model application designs, provide security risk assessments and remediation guidance, cultivate a security culture (training/mentoring), manage vulnerability/security debt processes, and build security tooling and automation. Preferred 3+ years guiding secure architecture and experience with threat modeling and supply chain security. Salary range listed: $113,600–$142,000/year.

Join DigitalOcean's Secure Design team to perform threat modeling and security risk assessments for product designs, collaborate with product and engineering teams on secure architecture, mentor engineers and promote security culture, and build automation and tooling to scale product security practices. Compensation range provided; role is remote.

The role is a staff-level network security engineering position focused on architecting and enforcing secure network designs, leading threat modeling and intrusion detection efforts, and developing automation and infrastructure-as-code to validate and enforce security at scale. Requires ~8-10 years of relevant experience and experience with protocols (BGP, OSPF, IS-IS), DDoS mitigation, observability tools, Linux, and scripting (Python/Go). This is a remote role based in the United States.

DigitalOcean seeks a Senior Security Analyst to lead real-time monitoring, engineer and automate advanced detections across cloud and corporate environments, perform proactive threat hunting, and mentor junior analysts. Requires 5+ years with SIEM and endpoint detection tools, experience with detection rule design/tuning, scripting (Python, Bash, SQL), and proficiency on Linux, Windows, and macOS. Compensation range: $109,600–$137,000 per year.

Lead assessment and mitigation of security risks in the virtualization stack (hypervisor, KVM/QEMU). Build systematic threat models, shared impact/likelihood rubrics, and propose defense-in-depth mitigations; collaborate with product and kernel teams to implement remediations. Required: deep familiarity with at least one kernel security feature, experience with virtualization performance trade-offs, and strong communication with engineering teams. Preferred: 5+ years systems-level coding, experience with threat models, side-channel mitigations, and languages such as Go, Rust, or C.

DigitalOcean is hiring a Senior Security Analyst to lead real-time monitoring, detection engineering, and proactive threat hunting across cloud and corporate environments. The role requires 5+ years hands-on experience with SIEM and endpoint detection tools, scripting (Python, Bash, SQL), and proficiency with Linux, Windows, and macOS; responsibilities include building detection use cases, reducing false positives, mentoring junior analysts, and developing metrics, playbooks, and runbooks.

Lead technical work to define and enforce network security architecture, perform network security assessments (threat modeling, intrusion detection, protocol analysis), develop security automation and infrastructure-as-code, and collaborate with network engineering to integrate security controls across edge, backbone, and datacenter networks. Requires 8+ years of experience in network security-focused roles and expertise with Layer 2/3/4 protocols, DDoS mitigation, SDN/MPLS/BGP architectures, Python or Go for automation, and observability tooling such as Prometheus, Grafana, and the ELK stack.

Lead technical work to define and enforce network security architecture, perform threat modeling and protocol analysis, and build automated security tooling and IaC. Requires ~8+ years experience with Layer 2/3/4 protocols (BGP, OSPF, IS-IS, VRRP, LACP), DDoS mitigation, SDN/MPLS/BGP-LU security concepts, scripting (Python/Go), observability tooling (Prometheus, Grafana, ELK), and strong Linux and networking platform familiarity (Corero, Cloudflare, Juniper, Arista, Ciena).

Join the Secure Design team as a Staff Product Security Engineer owning the security risk posture of the virtualization stack. Responsibilities include building systematic threat models and rubrics, proposing and implementing defense-in-depth mitigations, collaborating with kernel/virtualization/provisioning teams, mentoring engineers, and helping run vulnerability management. Role reports to the Manager of Secure Design and is a hybrid position. Compensation range listed: $175,000–$190,000.

Own the security risk posture for the virtualization stack by creating systematic threat models, shared rubrics for impact/likelihood, and proposing defense-in-depth mitigations. Collaborate with kernel, virtualization, provisioning, and product teams to implement remediations, mentor engineers, and help run vulnerability management. Required familiarity with kernel security features, QEMU/KVM performance considerations, and modern virtualized/containerized development workflows.

Technical owner for Audit Logging, SIEM Integration, and Unified Security Visibility across DigitalOcean's cloud platform. Role includes defining the multi-year roadmap, architecting fault-tolerant Go-based telemetry and streaming pipelines, designing SIEM integrations and customer-facing dashboards, and leading/mentoring engineers. Requires 10+ years software engineering experience with 4+ years in audit logging/security telemetry or high-throughput data pipelines; experience with Kafka/Flink, Kubernetes, Terraform, and compliance frameworks is emphasized.

Hands-on senior engineer responsible for architecting and implementing high-availability, low-latency IAM services in Go; building OIDC/SAML SSO integrations; evolving a policy engine (Rego/OPA) for advanced permissions; operating Kubernetes deployments and modern eventing pipelines; and mentoring junior engineers. Requires 5+ years of software engineering experience and strong identity, distributed systems, and cloud-native expertise.

Senior Software Engineer (IC3) responsible for designing and developing high-availability, low-latency authentication and authorization services in Go; implementing OIDC/SAML SSO integrations; evolving a policy engine (Rego/OPA) for advanced authorization; operating services on Kubernetes; and mentoring engineers. Requires 5+ years software engineering experience and strong identity, distributed systems, and cloud-native skills. Role is listed as remote.

Role involves designing, building, and maintaining security products and infrastructure at cloud scale: real-time detection engines (Apache Flink, Kafka), high-throughput security APIs and microservices (Go, Node.js), streaming analytics, and Kubernetes-based security solutions. Requires experience with distributed systems, cloud platforms (AWS/GCP/Azure), infrastructure-as-code (Terraform/Helm/Chef), and familiarity with security tooling (SIEM, WAF, IDS/IPS).

Responsible for designing, building, and maintaining security products and infrastructure: real-time detection engines (Apache Flink, Kafka), high-performance APIs and microservices (Go, Node.js), Kubernetes-based security solutions, and petabyte-scale data pipelines. Requires 5+ years of software engineering experience, strong Go and JavaScript skills, deep distributed systems and Kubernetes knowledge, and cloud experience (AWS/GCP/Azure). Role is listed as hybrid.