Staff Product Security Engineer, Secure Design (Kernel and Virtualization)

Digital Ocean
United States
Workplace: RemoteFull timeUSD 140,000 - 175,000 annuallyFunction: CybersecuritySkills: ["Communication","Leadership","Problem-solving","Collaboration","Mentorship"]

Senior Product Security Engineer to own the security risk posture for DigitalOcean’s virtualization stack, building threat models for hypervisor risk, designing defense-in-depth mitigations, and communicating risks to security, kernel, virtualization, and provisioning teams. Partners with engineering teams to implement secure-by-design protections, mentor engineers, and champion security initiatives across the stack.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
2 months ago

Staff Product Security Engineer, Secure Design (Kernel and Virtualization)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Senior Product Security Engineer to own the security risk posture for DigitalOcean’s virtualization stack, building threat models for hypervisor risk, designing defense-in-depth mitigations, and communicating risks to security, kernel, virtualization, and provisioning teams. Partners with engineering teams to implement secure-by-design protections, mentor engineers, and champion security initiatives across the stack.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Propose and implement mitigations and defense-in-depth to threats discovered through threat modeling the virtualization stack (90%)
  • •Provide deep technical expertise in systems architecture, kernel security features and network architecture to build out a threat model for the virtualization stack
  • •Identify the trade-offs of different solutions and recommend efficient designs to meet functional and security requirements, collaborating with cross-functional partners
  • •Collaborate with development teams to implement remediations and defense in depth to protect customers’ workloads
  • •Mentor software engineering teams in security best practices and help oversee the vulnerability management program

Pay and Benefits

Salary: USD 140,000 - 175,000 annually
Equity and Bonus:Equity

Key Requirements

  • •Deep familiarity with at least one kernel security feature (e.g., AppArmor, SELinux, Landlock)
  • •Capable of assessing and understanding the performance implications of code changes to virtualization stacks (especially in Qemu and KVM)
  • •A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity
  • •Ability to clearly communicate security topics and vulnerability classes (e.g., memory corruption, privilege escalation, TOCTOU) and provide actionable direction to product teams
  • •Working knowledge of modern development concepts (virtualized environments, containerization, CI/CD)
Experience:CybersecurityCloudSecurity engineering
Skills:CommunicationLeadershipProblem-solvingCollaborationMentorship
Languages:English
Tech Stack:GoRustCQEMUKVMKernel securityAppArmorSELinuxLandlockContainerizationCI/CD

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn