Senior Security Engineer

🕒 il y a 1 mois

🍂 Massachusetts – Distant

🍂 Massachusetts – Remote

💵 $140 000 - $175 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

DigitalOcean

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2011

☁️ SaaS

SaaS • Cloud Computing

DigitalOcean est un fournisseur d'infrastructure cloud qui propose une suite de produits et services permettant aux développeurs de créer, déployer et faire évoluer des applications. Leur plateforme offre des didacticiels complets, des documents de référence et des supports documentaires pour aider les utilisateurs à gérer efficacement leurs ressources en utilisant leurs outils API et CLI. Avec des fonctionnalités telles que Droplets (machines virtuelles), des bases de données gérées, Kubernetes et un marketplace pour les applications tierces, DigitalOcean met l'accent sur la simplicité et les performances. Ils s'adressent à la fois aux développeurs individuels et aux grandes organisations à la recherche de solutions cloud faciles à mettre en œuvre et à gérer.

Description

• Propose and implement mitigations and defense-in-depth to threats discovered through threat modeling the virtualization stack (90%) • Provide deep technical expertise in systems architecture, kernel security features and network architecture to build out a threat model for our virtualization stack • Identify the trade-offs of different solutions and recommend the efficient design to achieve both functional goals and security requirements. • Collaborate with development teams to implement remediations and defense in depth to protect DigitalOcean’s customers’ workloads. • Cultivate and promote a security culture (10%) • Mentor software engineering teams in security best practices. • Help oversee our vulnerability management program. • Help DigitalOcean engineers understand how security events impact them.

🎯 Exigences

• Deep familiarity with at least one kernel security feature (ex: AppArmor, SELinux, Landlock, etc.) • Capable of assessing and understanding the performance implications of code changes to virtualization stacks (especially in Qemu and KVM), built from hands-on experience. • A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity. • Ability to clearly communicate security topics and vulnerability classes (e.g. memory corruption, privilege escalation, TOCTOU, etc) and ability to provide actionable direction to product teams. • Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery). • 5+ years of writing systems level code (embedded systems, kernel, assembly or similar). • Experience guiding software teams on secure architecture design. • Written code for an embedded system (raspberry pi, arduino, etc). • Experience building or reviewing threat models and ability to craft malicious user, attacker, and abuse/misuse cases. • An understanding of patches and mitigations for hardware side-channel attacks. • Familiarity with object oriented and functional programming concepts, particularly with languages such as Go, Rust, or C.

🏖️ Avantages

• Competitive salary • Flexible working hours • Professional development resources • Employee Assistance Program • Local Employee Meetups • Flexible time off policy • Employee Stock Purchase Program