Digital Ocean

1 month ago

Senior Product Security Engineer I

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Lead product security initiatives across DigitalOcean’s platform, blending secure design with developer-friendly tooling. Collaborate with product, design, and engineering to threat model, review code, and build security services. Drive secure defaults in CI/CD, champion security culture, and guide teams through AI/LLM security risks, protecting customers and the internet community.

Location: Bengaluru

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Provide holistic assessments of security layers across infrastructure, application, people, and processes.
•Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.
•Review source code against secure coding best practices and contribute security requirements.
•Drive the software design and implementation of security services, tools, and libraries to provide secure defaults to the rest of the organization.
•Promote security remediations in the CI/CD pipeline by building tools and services for engineers to consume.

Key Requirements

•Strong communication and stakeholder management skills, with the ability to simplify complex security risks and provide actionable business and technical guidance to product teams and stakeholders.
•Hands-on experience in secure code reviews and threat modelling. We primarily develop in Python, JavaScript, and PHP. You are comfortable writing code with good test coverage.
•Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery, Public Cloud such as AWS/GCP).
•Hands-on experience with AI security frameworks such as MITRE ATLAS, MAESTRO, and OWASP Top 10 for LLMs/Agents/MCP, with expertise in threat modeling and mitigating a broad range of AI security risks, including direct and indirect prompt injection, training data poisoning, tool poisoning, and data exfiltration across agentic workflows.
•A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity. Engineering teams are our partners, not our adversaries.

Experience:CybersecurityApplication securitySecurity engineering

Education:Bachelor's

Skills:CommunicationThreat modelingSecure codingCode reviewsDevopsCI/CDPythonJavaScriptPHPAWSGCPContainerizationSemgrepAI securityMITRE ATLASMAESTROOWASP

Languages:English

Tech Stack:PythonJavaScriptPHPAWSGCPVirtualizationContainerizationCI/CDSemgrep

Company Brief

Digital Ocean

Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.

Industry: Cloud Computing

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 2011

Glassdoor: 3.8

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Digital Ocean

1 month ago

Senior Product Security Engineer I

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Location: Bengaluru

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Provide holistic assessments of security layers across infrastructure, application, people, and processes.
•Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.
•Review source code against secure coding best practices and contribute security requirements.
•Drive the software design and implementation of security services, tools, and libraries to provide secure defaults to the rest of the organization.
•Promote security remediations in the CI/CD pipeline by building tools and services for engineers to consume.

Key Requirements

•Strong communication and stakeholder management skills, with the ability to simplify complex security risks and provide actionable business and technical guidance to product teams and stakeholders.
•Hands-on experience in secure code reviews and threat modelling. We primarily develop in Python, JavaScript, and PHP. You are comfortable writing code with good test coverage.
•Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery, Public Cloud such as AWS/GCP).
•Hands-on experience with AI security frameworks such as MITRE ATLAS, MAESTRO, and OWASP Top 10 for LLMs/Agents/MCP, with expertise in threat modeling and mitigating a broad range of AI security risks, including direct and indirect prompt injection, training data poisoning, tool poisoning, and data exfiltration across agentic workflows.
•A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity. Engineering teams are our partners, not our adversaries.

Experience:CybersecurityApplication securitySecurity engineering

Education:Bachelor's

Skills:CommunicationThreat modelingSecure codingCode reviewsDevopsCI/CDPythonJavaScriptPHPAWSGCPContainerizationSemgrepAI securityMITRE ATLASMAESTROOWASP

Languages:English

Tech Stack:PythonJavaScriptPHPAWSGCPVirtualizationContainerizationCI/CDSemgrep

Company Brief

Digital Ocean

Industry: Cloud Computing

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 2011

Glassdoor: 3.8

Website LinkedIn