Remote Kernel & Virtualization Security Engineer

DigitalOcean; United States; Remoto; USD 168.000 - 227.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote work

Equity compensation

Bonus potential

Descrizione del lavoro

DigitalOcean is seeking a Staff Product Security Engineer to own the security risk posture of our virtualization stack. You will build threat models, quantify risk, and drive defense-in-depth mitigations with cross-functional teams across product and security engineering.

You will report to the Manager of Secure Design and help scale security patterns, guidance, and automation while promoting a secure-by-design culture across the organization.

Competenze

• Deep familiarity with at least one kernel security feature (e.g. AppArmor, SELinux, Landlock, etc.).
• Capable of assessing and understanding performance implications of code changes to virtualization stacks (Qemu, KVM) from hands-on experience.
• Record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity.
• Ability to clearly communicate security topics and vulnerability classes and provide actionable direction to product teams.
• Working knowledge of modern development concepts (virtualized environments, containerization, CI/CD).

Mansioni

• Propose and implement mitigations and defense-in-depth to threats discovered through threat modeling the virtualization stack (90%).
• Provide deep technical expertise in systems architecture, kernel security features and network architecture to build a threat model for the virtualization stack.
• Identify trade-offs of different solutions and recommend efficient designs that meet functional and security goals.
• Collaborate with development teams to implement remediations and defense in depth to protect customers' workloads.

Conoscenze

kernel security feature

threat modeling

cross-functional collaboration

communicate vulnerabilities

development concepts

Descrizione del lavoro

DigitalOcean is seeking a Staff Product Security Engineer to own the security risk posture of our virtualization stack. You will build threat models, quantify risk, and drive defense-in-depth mitigations with cross-functional teams across product and security engineering.

You will report to the Manager of Secure Design and help scale security patterns, guidance, and automation while promoting a secure-by-design culture across the organization.