Staff Network Security Engineer

Linuxcareers; United States; On-site; USD 168,800 - 211,000; Full time

Benefits offered by this job

Employee Assistance Program

Flexible time off policy

Conference/training reimbursement

LinkedIn Learning access

Job summary

DigitalOcean is seeking a Staff Network Security Engineer to lead the security of their global cloud infrastructure. This role involves architecting secure network systems and providing technical leadership to teams across various environments.

The ideal candidate will have 8–10 years of experience in network security, deep understanding of networking protocols, and proficiency in scripting languages like Python or Go. Benefits include flexible time off policy, conference reimbursement, and participation in equity programs.

Qualifications

• 8–10 years of experience in network security engineering or related roles.
• Deep understanding of DDoS attack vectors and mitigation strategies.
• Experience leading projects and guiding cross-functional teams.

Responsibilities

• Define and enforce network security architecture standards.
• Provide technical leadership and mentorship to engineering teams.
• Lead network security assessments and develop advanced security tooling.

Skills

Network Security Engineering

Scripting/Programming (Python or Go)

Layer 2/3/4 Networking Protocols

Linux Security

Communication Skills

Tools

Prometheus

Grafana

ELK Stack

Job description

DigitalOcean is seeking a Staff Network Security Engineer to lead the security of their global cloud infrastructure. This role reports to the Manager of Security Defense Engineering and involves architecting secure network systems, providing technical leadership to security and network teams, and ensuring resilience against evolving threats across edge, backbone, and datacenter environments.

What You'll Do

• Define and enforce network security architecture standards and principles across global infrastructure
• Provide technical leadership and mentorship to security and network engineering teams as a subject matter expert
• Lead network security assessments including threat modeling, intrusion detection, and protocol-level analysis
• Develop and deploy advanced security automation, tooling, and infrastructure-as-code to validate security posture and enforce compliance at scale
• Collaborate with network engineers to integrate security controls within SDN, BGP/MPLS, and network automation platforms
• Participate in network security incident response and drive security review processes for infrastructure changes

What You Need

• 8–10 years of experience in network security engineering, network penetration testing, or security-focused infrastructure roles
• Deep understanding of Layer 2/3/4 networking protocols (BGP, OSPF, IS-IS, VRRP, LACP) and their security implications
• Deep understanding of distributed denial-of-service (DDoS) attack vectors and mitigation strategies
• Extensive experience designing and building secure networks from the ground up
• Proficiency in scripting/programming languages such as Python or Go
• Strong Linux experience and familiarity with firewall, routing, and DNS security
• Experience leading projects and providing technical guidance to cross-functional teams
• Excellent communication skills to collaborate with technical and non-technical stakeholders

Nice to Have

• Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena network platforms
• Knowledge of MPLS, BGP-LU, and SDN architectures from a security perspective
• Hands-on experience with observability tools like Prometheus, Grafana, and ELK stack
• Open-source contributions related to network security
• Background in security incident response or red/blue team operations
• Comfortable with Git-based workflows and collaborative development

Salary range $168,800–$211,000 base. Eligible for bonus based on company and individual performance, plus equity compensation including equity grants upon hire and Employee Stock Purchase Program participation. Benefits include Employee Assistance Program, flexible time off policy, conference/training reimbursement, and LinkedIn Learning access.