Product Security Engineer, Secure Design

🔥 12 hours ago

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $113.6k - $142k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DigitalOcean

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

☁️ SaaS

SaaS • Cloud Computing

DigitalOcean is a cloud infrastructure provider that offers a suite of products and services for developers to build, deploy, and scale applications. Their platform provides comprehensive tutorials, reference material, and support documentation to assist users in managing resources effectively using their API and CLI tools. With features like Droplets (virtual machines), managed databases, Kubernetes, and a marketplace for third-party applications, DigitalOcean focuses on simplicity and performance. They cater to both individual developers and larger organizations looking for cloud solutions that are easy to implement and manage.

📋 Description

• Report to the Manager of Secure Design • Threat model application designs and solutions and provide security risk assessments • Provide technical expertise in software and network architecture during holistic security-layer assessments across infrastructure, application, people, and process • Collaborate with product managers, designers, and engineers to threat model and architect secure, resilient systems • Identify solution trade-offs and recommend efficient designs meeting functional goals and security requirements • Provide hands-on remediation guidance to development teams • Champion internal security culture through developer training and internal CTFs • Mentor software engineering teams in security best practices • Help oversee the vulnerability management program and security debt • Help engineers understand the impact of security events and vulnerabilities • Build security tooling and automations to scale Product Security practices • Integrate custom security tooling into engineering workflows • Drive security-focused architecture, patterns, and processes across engineering

🎯 Requirements

• Experience leading architectural changes or complex cross team efforts to mitigate security vulnerabilities • Ability to clearly communicate security topics and vulnerability classes, including OWASP Top Ten, and provide actionable direction to product teams • Record of partnering with internal engineering teams to tackle security problems across an entire stack • Working knowledge of modern development concepts, including virtualized environments, containerization, and continuous integration and delivery • 3+ years experience guiding software teams on secure architecture design (preferred) • Experience building or reviewing threat models and crafting malicious user, attacker, and abuse/misuse cases (preferred) • Working knowledge of hardware and software supply chain security (preferred) • Familiarity with object-oriented and functional programming concepts, particularly Go, JavaScript, Rust, or C (preferred)

🏖️ Benefits

• Reimbursement for relevant conferences, training, and education • Access to LinkedIn Learning's 10,000+ courses • Employee Assistance Program • Local Employee Meetups • Flexible time off policy • Bonus eligibility based on company and individual performance • Equity compensation, including equity grants upon hire • Option to participate in the Employee Stock Purchase Program