Senior Network Security Engineer

DigitalOcean; Remote; GBP 102,000 - 128,000; Full time

Job summary

A leading cloud infrastructure provider is seeking a Senior Network Security Engineer to enhance their DDoS protection and network resilience efforts. In this remote role, you will define security baselines, manage integration with existing security infrastructures, and ensure robust network device operation. Ideal candidates will have 3+ years in DDoS mitigation, strong networking skills with TCP/IP and BGP, and relevant certifications. Excellent compensation range of $137,000 - $171,000 plus potential bonuses and equity compensation is offered.

Benefits

Competitive salary

Flexible time off

Career development resources

Equity compensation

Qualifications

• 3+ years of hands-on experience with DDoS protection platforms.
• Deep understanding of attack vectors and NetFlow Flow analysis.
• Strong expertise in network architecture and enterprise networking equipment.

Responsibilities

• Establish baseline traffic patterns and define DDoS detection thresholds.
• Integrate with existing security infrastructure and provide recommendations.
• Configure and maintain network devices and troubleshoot issues.
• Monitor network traffic patterns and assist with capacity planning.
• Cultivate relationships with network security vendors.

Skills

DDoS mitigation technologies

Network resilience

TCP/IP

BGP

OSPF

VLANs

Traffic analysis

Education

CCNP Security or equivalent

CISSP

GIAC or other relevant security certifications

Tools

Wireshark

tcpdump

Job description

Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you’ll find your place here. We value winning together—while learning, having fun, and making a profound difference for the dreamers and builders in the world.

We are looking for a Senior Network Security Engineer who is passionate about DDoS mitigation technologies and network resilience. As a Senior Network Security Engineer at DigitalOcean, you will join a dynamic team dedicated to revolutionizing cloud computing and AI.

You will serve as the DDoS Security Platform & Network Specialist. You will be in charge of the DDoS platform, ensuring our infrastructure remains robust against evolving threats while supporting the protection of our critical services.

What You’ll Do:

• Define Security Baselines: Establish baseline traffic patterns, define DDoS detection thresholds, and conduct simulated DDoS attack scenarios to validate protection capabilities.
• Integration & Documentation: Integrate with existing security infrastructure (SIEM, SOC tools), document configuration and findings, and provide recommendations for production deployment.
• Network Infrastructure Support: Configure and maintain network devices (routers, switches, firewalls) and troubleshoot network connectivity and performance issues.
• Traffic & Capacity Management: Monitor network traffic patterns and bandwidth utilization, assist with capacity planning, and implement network segmentation and access control policies.
• Vendor Relations: Cultivate and maintain strong partnerships with existing and new network security vendors to ensure comprehensive security coverage.

Key Metrics

• Security Posture: Reduction in the number of critical security vulnerabilities identified and remediation time for high-priority threats, particularly DDoS attack vectors.
• Incident Response: Decrease in the Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) for security incidents, especially those related to volumetric and application-layer DDoS attacks.
• Enablement: Enable cross-functional teams with strong DDoS mitigation strategies and best network security practices to enhance the overall security posture of the network.

What You’ll Add to DigitalOcean

• DDoS Mitigation Expertise: 3+ years of hands-on experience with DDoS protection platforms (Corero, Arbor, Radware, or similar), including a deep understanding of attack vectors and NetFlow Flow analysis.
• Network Proficiency: Strong expertise in TCP/IP, BGP, OSPF, VLANs, and network architecture, combined with proficiency in enterprise networking equipment (Cisco, Juniper, Arista, or similar).
• Traffic Analysis: Experience with packet capture and analysis tools such as Wireshark and tcpdump.
• Preferred Experience: Previous Corero SmartWall deployment or administration, experience with cloud-based DDoS protection services, and familiarity with SDN (Software-Defined Networking) concepts.
• Advanced Routing Knowledge: Knowledge of BGP Flowspec and RTBH (Remotely Triggered Black Hole) routing.
• Certifications: CCNP Security or equivalent; CISSP, GIAC, or other relevant security certifications are preferred.

Compensation Range

• $137,000 - $171,000

*This is a remote role

#LI-Remote

Why You’ll Like Working for DigitalOcean

• We innovate with purpose. You’ll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions.
• We prioritize career development. At DO, you’ll do the best work of your career. You will work with some of the smartest and most interesting people in the industry. We are a high-performance organization that will always challenge you to think big. Our organizational development team will provide you with resources to ensure you keep growing. We provide employees with reimbursement for relevant conferences, training, and education. All employees have access to LinkedIn Learning's 10,000+ courses to support your continued growth and development.
• We care about your well-being. Regardless of your location, we will provide you with a competitive array of benefits to support you from our Employee Assistance Program to Local Employee Meetups to flexible time off policy, to name a few. While the philosophy around our benefits is the same worldwide, specific benefits may vary based on local regulations and preferences.
• We reward our employees. The salary range for this position is based on market data, relevant years of experience, and skills. You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company and individual performance. We also provide equity compensation to eligible employees, including equity grants upon hire and the option to participate in our Employee Stock Purchase Program.
• DigitalOcean is an equal-opportunity employer. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.