Staff Network Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $168.8k - $211k / year

⏰ Full Time

🔴 Lead

🛜 Network Engineer / Network Administrator

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DigitalOcean

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

☁️ SaaS

SaaS • Cloud Computing

DigitalOcean is a cloud infrastructure provider that offers a suite of products and services for developers to build, deploy, and scale applications. Their platform provides comprehensive tutorials, reference material, and support documentation to assist users in managing resources effectively using their API and CLI tools. With features like Droplets (virtual machines), managed databases, Kubernetes, and a marketplace for third-party applications, DigitalOcean focuses on simplicity and performance. They cater to both individual developers and larger organizations looking for cloud solutions that are easy to implement and manage.

📋 Description

• Define and enforce network security architecture standards and principles • Provide technical leadership and mentorship to security and network engineering teams as a network security subject matter expert • Lead network security assessments, including threat modeling, intrusion detection, and protocol-level analysis • Develop and deploy security automation, tooling, and infrastructure-as-code • Collaborate with network engineers to integrate security controls and telemetry within SDN, BGP/MPLS, and network automation platforms • Participate in incident response efforts related to network security incidents • Drive security reviews for network infrastructure or product changes before deployment • Promote security best practices through documentation, tooling, and cross-team collaboration • Partner with engineering teams to advise on secure architecture and secure DigitalOcean's global network infrastructure • Report to the Manager, Security Defense Engineering

🎯 Requirements

• 8–10 years of experience in network security engineering, network penetration testing, or security-focused infrastructure roles • Excellent communication skills for technical and non-technical stakeholder collaboration • Deep understanding of Layer 2/3/4 networking protocols, including BGP, OSPF, IS-IS, VRRP, and LACP, and their security implications • Deep understanding of DDoS attack vectors and mitigation strategies, including packet filtering, rate limiting, and scrubbing services • Extensive experience designing and building secure networks from the ground up • Experience leading projects and providing technical guidance to cross-functional teams • Proficiency in Python or Go for automation and tooling • Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena network platforms • Strong Linux experience and familiarity with firewall, routing, and DNS security • Understanding and experience with Network Intrusion Detection principles and tooling • Knowledge of MPLS, BGP-LU, and SDN architectures from a security perspective • Hands-on experience with Prometheus, Grafana, and ELK stack • Comfortable with Git-based workflows and collaborative development • Bonus: open-source contributions related to network security • Bonus: background in security incident response or red/blue team operations

🏖️ Benefits

• Reimbursement for relevant conferences, training, and education • Access to LinkedIn Learning's 10,000+ courses • Employee Assistance Program • Local Employee Meetups • Flexible time off policy • Bonus opportunity in addition to base salary, based on company and individual performance • Equity compensation for eligible employees, including equity grants upon hire • Option to participate in the Employee Stock Purchase Program