Staff Product Security Engineer, Secure Design (Kernel and Virtualization)

Digital Ocean
Boston
Workplace: RemoteFull timeFunction: CybersecuritySkills: ["Go","Rust","C","Linux","Kernel","Threat modeling","Security architecture","Vulnerability management"]

Senior Product Security Engineer responsible for owning the security risk posture of the virtualization stack, building threat models, and driving defense-in-depth mitigations with cross-functional partners. You will mentor teams on security practices, oversee vulnerability management, and communicate risk clearly to product and security teams while advancing secure-by-design principles across DigitalOcean’s virtualization stack.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
2 months ago

Staff Product Security Engineer, Secure Design (Kernel and Virtualization)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Senior Product Security Engineer responsible for owning the security risk posture of the virtualization stack, building threat models, and driving defense-in-depth mitigations with cross-functional partners. You will mentor teams on security practices, oversee vulnerability management, and communicate risk clearly to product and security teams while advancing secure-by-design principles across DigitalOcean’s virtualization stack.
Location: Boston
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Propose and implement mitigations and defense-in-depth to threats discovered through threat modeling the virtualization stack (90%)
  • •Provide deep technical expertise in systems architecture, kernel security features and network architecture to build out a threat model for our virtualization stack
  • •Identify the trade-offs of different solutions and recommend efficient designs to achieve functional goals and security requirements
  • •Collaborate with development teams to implement remediations and defense in depth to protect customers’ workloads
  • •Mentor software engineering teams in security best practices and help oversee our vulnerability management program (security debt)

Pay and Benefits

Salary: 140,000

Key Requirements

  • •Deep familiarity with at least one kernel security feature (e.g., AppArmor, SELinux, Landlock)
  • •Ability to assess and understand performance implications of changes to virtualization stacks (especially Qemu and KVM)
  • •Proven track record partnering with internal engineering teams to tackle security problems across an entire stack
  • •Ability to clearly communicate security topics and vulnerability classes (e.g., memory corruption, privilege escalation, TOCTOU) and provide actionable guidance to product teams
  • •Working knowledge of modern development concepts (virtualized environments, containerization, CI/CD)
Experience:CloudSecurityVirtualizationKernel
Skills:GoRustCLinuxKernelThreat modelingSecurity architectureVulnerability management
Languages:English
Tech Stack:GoRustCQemuKVMAppArmorSELinuxLandlockLinuxCI/CDDocker

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn