D

DigitalOcean

Runs cloud infrastructure for apps and AI

Senior Product Security Engineer - Security Platform

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeBengaluru, Karnataka, India

About the Job

Requirements

  • At least 5 years of experience in software engineering projects with a security focus; comfort writing robust code with good test coverage and examples of successfully delivered projects.
  • Experience building or reviewing threat models and crafting malicious-user, attacker, and abuse/misuse cases.
  • Working knowledge of hardware and software supply chain security.
  • Understanding of security topics and vulnerability classes, including the OWASP Top Ten, and ability to explain security benefits to engineers.
  • A record of partnering empathetically and creatively with internal engineering teams to address security problems across an entire stack.
  • Preferred: Familiarity with gRPC, Docker, Prometheus, Kubernetes, HashiCorp Vault, and GitHub Actions.
  • Preferred: Experience with microservice architectures, asynchronous and event-driven processing, and synchronous gRPC/HTTP-based requests.
  • Preferred: Strong analytical, communication, and organizational skills.

Responsibilities

  • Drive operations and coverage of deployed application security tooling, including static application security testing, software composition analysis, and secrets management; synthesize findings into actionable priorities and work with engineering teams to close gaps.
  • Develop custom internal Semgrep rules to establish guardrails for safe engineering practices.
  • Apply secure engineering capabilities to support the wider security organization, potentially by building an artificial intelligence agent for Trust & Safety or an alert pipeline for the security operations center.
  • Design and build internal tooling that provides engineering teams with secure-by-default configurations and libraries.
  • Write robust, resilient, and maintainable software, primarily in Go and Python, with occasional frontend work.
  • Prioritize the user experience of internal development teams so security libraries and services are an easy and fast way to get work done.
  • Coordinate application security tooling and strategic engineering initiatives to close security gaps.
  • Collaborate with security teams and the wider organization to promote secure software design, reduce security risk, and help engineers make informed security decisions.

Desired Qualifications

  • Familiarity with gRPC, Docker, Prometheus, Kubernetes, HashiCorp Vault, and GitHub Actions.
  • Experience with microservice architectures, asynchronous and event-driven processing, and synchronous gRPC/HTTP-based requests.
  • Strong analytical, communication, and organizational skills.

About the Company

DigitalOcean

Runs cloud infrastructure for apps and AI

DigitalOcean provides cloud infrastructure for developers and businesses to build, host and scale applications and AI services. Teams rent virtual machines called Droplets, store data and run managed databases or Kubernetes clusters through a web console and APIs. Its AI services supply GPU computing, model inference and managed environments where software agents use tools and retain information between sessions. Customers pay for the resources they use, with subscriptions and managed services helping teams run applications without maintaining all the underlying infrastructure themselves. DigitalOcean was founded in 2012 and is headquartered in Broomfield, Colorado.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Broomfield, CO
Founded
2012

Recently Posted Jobs

Explore more opportunities at DigitalOcean

See more jobs