Senior Product Security Engineer I

Digital Ocean
Bengaluru
Workplace: HybridFull timeFunction: CybersecurityEducation: bachelorsSkills: ["Communication","Threat modeling","Secure coding","Code reviews","Devops","CI/CD","Python","JavaScript","PHP","AWS","GCP","Containerization","Semgrep","AI security","MITRE ATLAS","MAESTRO","OWASP"]

Lead product security initiatives across DigitalOcean’s platform, blending secure design with developer-friendly tooling. Collaborate with product, design, and engineering to threat model, review code, and build security services. Drive secure defaults in CI/CD, champion security culture, and guide teams through AI/LLM security risks, protecting customers and the internet community.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
3 months ago

Senior Product Security Engineer I

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live
Reposted: similar role first listed 4 months ago

Job Summary

Lead product security initiatives across DigitalOcean’s platform, blending secure design with developer-friendly tooling. Collaborate with product, design, and engineering to threat model, review code, and build security services. Drive secure defaults in CI/CD, champion security culture, and guide teams through AI/LLM security risks, protecting customers and the internet community.
Location: Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Provide holistic assessments of security layers across infrastructure, application, people, and processes.
  • •Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.
  • •Review source code against secure coding best practices and contribute security requirements.
  • •Drive the software design and implementation of security services, tools, and libraries to provide secure defaults to the rest of the organization.
  • •Promote security remediations in the CI/CD pipeline by building tools and services for engineers to consume.

Key Requirements

  • •Strong communication and stakeholder management skills, with the ability to simplify complex security risks and provide actionable business and technical guidance to product teams and stakeholders.
  • •Hands-on experience in secure code reviews and threat modelling. We primarily develop in Python, JavaScript, and PHP. You are comfortable writing code with good test coverage.
  • •Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery, Public Cloud such as AWS/GCP).
  • •Hands-on experience with AI security frameworks such as MITRE ATLAS, MAESTRO, and OWASP Top 10 for LLMs/Agents/MCP, with expertise in threat modeling and mitigating a broad range of AI security risks, including direct and indirect prompt injection, training data poisoning, tool poisoning, and data exfiltration across agentic workflows.
  • •A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity. Engineering teams are our partners, not our adversaries.
Experience:CybersecurityApplication securitySecurity engineering
Education:Bachelor's
Skills:CommunicationThreat modelingSecure codingCode reviewsDevopsCI/CDPythonJavaScriptPHPAWSGCPContainerizationSemgrepAI securityMITRE ATLASMAESTROOWASP
Languages:English
Tech Stack:PythonJavaScriptPHPAWSGCPVirtualizationContainerizationCI/CDSemgrep

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn