Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

DigitalOcean

Compare

3.5

based on 13 Reviews

35 DigitalOcean Jobs

Senior Product Security Engineer II

DigitalOcean, Inc.

3.5

based on 13 Reviews

3-5 years

Hyderabad / Secunderabad

1 vacancy

Senior Product Security Engineer II

DigitalOcean

posted 1mon ago

Job Role Insights

Flexible timing

Key skills for the job

Medical Coding Python Supply Chain Management Javascript PHP Application Security

+ 2 more

Job Description

We want people who are passionate about making the internet a safer place for everyone.

We re looking for a Product Security Engineer to solve large-scale security challenges while reducing the impact and burden of these security initiatives on engineering. We believe application security best enables the enterprise when it integrates into developer lifecycles.

As a member of the Security Engineering team, you will collaborate with other security teams and the rest of DigitalOcean to guide secure architecture design and reduce security risk in the organization through the construction of guardrails and paved paths that empower engineers to make informed security decisions. Security at DO means solving incredibly complex problems at a high-scale that have real impact for our customers, our products, and for the larger internet community.

What you ll be doing:

Provide holistic assessments of security layers across infrastructure, application, people, and processes.
Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.
Review source code against secure coding best practices and contribute security requirements.
Drive the software design and implementation of security services, tools, and libraries to provide secure defaults to the rest of the organization.
Promote security remediations in the CI/CD pipeline by building tools and services for engineers to consume (e.g. custom Semgrep implementation, developer-first secrets management ).
Help build the platform that ensures software development at DigitalOcean is safe, easy, and low-risk.
Champion an internal security culture (developer training, internal CTFs, etc.).
Help DigitalOcean engineers understand how security events impact them. Do they need to worry about the next Log4j CVE? How does RetBleed impact DigitalOcean s fleet?

What we ll expect from you:

We know you will have a unique combination of skills and don t expect you to check every box on this list. Below are some of the skills that you have already acquired or will have the opportunity to learn while at DigitalOcean:

Ability to clearly communicate security topics and vulnerability classes (e.g. OWASP Top Ten) and provide actionable direction to product teams.
A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity. Engineering teams are our partners, not our adversaries.
Hands-on experience in software engineering projects. We primarily develop in PHP, JavaScript, and Python. You are comfortable writing code with good test coverage.
Working knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery, Public Cloud such as AWS).

Preferred qualifications:

Bachelors degree in Computer Science or related field.
1.5+ years of experience in application security or product security roles.

Do you have 3+ years of software engineering experience, are interested in moving into a dedicated security role, and can share examples of championing security issues in the past? We also want to speak to you!

Proven professional experience guiding software teams on secure architecture design.
Working knowledge of system architecture and/or application architecture.
Experience building or reviewing threat models and ability to craft malicious user, attacker, and abuse/misuse cases.
Working knowledge of hardware and software supply chain security.

Employment Type: Full Time, Permanent

Read full job description