Senior Product Security Engineer I

The role

You will solve large-scale security challenges and guide secure architecture design. You will build security services, tools, and libraries to provide secure defaults for engineers.

What you will do

• Provide holistic assessments of security layers across infrastructure, application, people, and processes.
• Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.
• Review source code against secure coding best practices and contribute security requirements.
• Drive the software design and implementation of security services, tools, and libraries.
• Promote security remediations in the CI/CD pipeline by building tools and services.
• Help build the platform that ensures software development is safe, easy, and low-risk.
• Champion an internal security culture through developer training and internal CTFs.
• Help engineers understand how security events impact them.

Required qualifications

• Strong communication and stakeholder management skills.
• Hands-on experience in secure code reviews and threat modelling.
• Comfortable writing code with good test coverage in Python, JavaScript, and PHP.
• Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery, Public Cloud such as AWS/GCP).
• Hands-on experience with AI security frameworks such as MITRE ATLAS, MAESTRO, and OWASP Top 10 for LLMs/Agents/MCP.
• Expertise in threat modeling and mitigating AI security risks including prompt injection, training data poisoning, tool poisoning, and data exfiltration.
• A record of partnering with internal engineering teams to tackle security problems.

Nice to have

• Bachelor's degree in Computer Science or related field.
• 5+ years experience guiding software teams on security architecture design.
• 5+ years of experience in application security or product security roles.
• 3+ years of software engineering experience.
• Proven professional experience guiding software teams on secure architecture design.
• Working knowledge of system architecture and/or application architecture.
• Proven ability to secure end-to-end AI/ML pipelines.
• Experience building or reviewing threat models and ability to craft malicious user, attacker, and abuse/misuse cases.
• Working knowledge of hardware and software supply chain security.

Benefits

• Reimbursement for relevant conferences, training, and education, subject to company policy.
• Flexible time off.
• Local team meetups.
• Mental health and well being support.
• Equity compensation including new hire equity grant and Employee Stock Purchase Program.
• Annual bonus plan.

Before you apply

• You may apply to a maximum of 3 positions within any 180-day period.

About the company

DigitalOcean is a technology company that aims to build the simplest scalable cloud. They value winning together, learning, and making a difference for dreamers and builders.