Join DigitalOcean's Secure Design team to perform threat modeling and security risk assessments, provide remediation guidance, mentor engineering teams, and build automation and tooling to scale product security practices. The role focuses on secure architecture across infrastructure, application, people, and process.

Join DigitalOcean's Secure Design team to perform threat models and security risk assessments, provide hands-on remediation guidance, cultivate a security culture, build security tooling and automation, and collaborate with product and security teams. Preferred experience includes guiding secure architecture design, threat modeling, and knowledge of supply chain security and languages like Go, JavaScript, Rust, or C.

DigitalOcean seeks a Principal Engineer, AI/ML Security to own the company's AI security strategy and roadmap, lead adversarial testing and red teaming, review AI product architectures, and build/run ML security tooling and monitoring. Requires 10+ years in cybersecurity with 4–5+ years focused on AI/ML security, deep knowledge of adversarial ML, hands-on experience with Python and Go, and familiarity with frameworks like OWASP LLM Top 10, MITRE ATLAS, and NIST AI RMF.

Principal engineer role responsible for defining and owning AI security strategy and roadmap, partnering with product and security teams to integrate controls, building and operating adversarial testing, model monitoring, guardrails, and tooling, conducting threat modeling and architecture reviews, and representing AI security to senior leadership.

DigitalOcean seeks a Principal Engineer, AI/ML Security to define and drive AI security strategy and roadmap, perform adversarial ML testing and red teaming, review AI product architectures, build detection/guardrail tooling, and establish AI risk and governance. Requires 10+ years in cybersecurity with 4–5 years focused on AI/ML security, strong Python and Go experience, hands-on adversarial ML knowledge, and familiarity with frameworks like OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, ISO/IEC 42001, and the EU AI Act.

Lead AI/ML security efforts including adversarial testing and red teaming, integrating AI security controls into customer-facing products, building and deploying ML security tooling and guardrails, monitoring models in production, defining AI risk & governance, and representing program-level risk to senior leadership. Requires 10+ years in cybersecurity with 4–5 years focused on AI/ML security, strong Python and Go skills, and hands-on adversarial ML experience.

Role requires owning AI security strategy and roadmap, conducting adversarial ML testing and AI red teaming, defining governance/policies, reviewing AI/ML architectures, and partnering with security and engineering teams. Requires 10+ years in cybersecurity with 4–5 years focused on AI/ML security, strong hands-on experience with adversarial ML, LLM security, model supply-chain risk, and programming in Python and Go.

Lead assessment and mitigation of security risks in the virtualization stack (hypervisor, KVM/QEMU). Build systematic threat models, shared impact/likelihood rubrics, and propose defense-in-depth mitigations; collaborate with product and kernel teams to implement remediations. Required: deep familiarity with at least one kernel security feature, experience with virtualization performance trade-offs, and strong communication with engineering teams. Preferred: 5+ years systems-level coding, experience with threat models, side-channel mitigations, and languages such as Go, Rust, or C.

Role on the Secure Design team partnering with product and engineering teams to threat model applications, assess and reduce security risk, provide remediation guidance, run vulnerability management, mentor engineers, and build automation and tooling to scale product security practices.

Join the Secure Design team as a Staff Product Security Engineer owning the security risk posture of the virtualization stack. Responsibilities include building systematic threat models and rubrics, proposing and implementing defense-in-depth mitigations, collaborating with kernel/virtualization/provisioning teams, mentoring engineers, and helping run vulnerability management. Role reports to the Manager of Secure Design and is a hybrid position. Compensation range listed: $175,000–$190,000.

Own the security risk posture for the virtualization stack by creating systematic threat models, shared rubrics for impact/likelihood, and proposing defense-in-depth mitigations. Collaborate with kernel, virtualization, provisioning, and product teams to implement remediations, mentor engineers, and help run vulnerability management. Required familiarity with kernel security features, QEMU/KVM performance considerations, and modern virtualized/containerized development workflows.

Hands-on senior engineer responsible for architecting and implementing high-availability, low-latency IAM services in Go; building OIDC/SAML SSO integrations; evolving a policy engine (Rego/OPA) for advanced permissions; operating Kubernetes deployments and modern eventing pipelines; and mentoring junior engineers. Requires 5+ years of software engineering experience and strong identity, distributed systems, and cloud-native expertise.

Senior Software Engineer (IC3) responsible for designing and developing high-availability, low-latency authentication and authorization services in Go; implementing OIDC/SAML SSO integrations; evolving a policy engine (Rego/OPA) for advanced authorization; operating services on Kubernetes; and mentoring engineers. Requires 5+ years software engineering experience and strong identity, distributed systems, and cloud-native skills. Role is listed as remote.

Role involves designing, building, and maintaining security products and infrastructure at cloud scale: real-time detection engines (Apache Flink, Kafka), high-throughput security APIs and microservices (Go, Node.js), streaming analytics, and Kubernetes-based security solutions. Requires experience with distributed systems, cloud platforms (AWS/GCP/Azure), infrastructure-as-code (Terraform/Helm/Chef), and familiarity with security tooling (SIEM, WAF, IDS/IPS).

Responsible for designing, building, and maintaining security products and infrastructure: real-time detection engines (Apache Flink, Kafka), high-performance APIs and microservices (Go, Node.js), Kubernetes-based security solutions, and petabyte-scale data pipelines. Requires 5+ years of software engineering experience, strong Go and JavaScript skills, deep distributed systems and Kubernetes knowledge, and cloud experience (AWS/GCP/Azure). Role is listed as hybrid.