DigitalOcean Cloud Security Architect

Cloud Security Architect Position

We are seeking a motivated technical contributor to join our DigitalOcean Security Team as an Infrastructure Security Engineer. You will report to the APAC region's Security Engineering Manager and be a key member of our security team.

This role is essential for enhancing our digital security posture, including collaborating with various Engineering and Security teams to:

• Design and implement infrastructure security solutions at scale
• Identify and mitigate security issues, vulnerabilities, and misconfigurations for both internal users and customers

Your efforts will provide security instrumentation and establish secure architectures within our environments, both corporate and customer-facing.

Key Responsibilities

You will play a vital part in:

• Establishing a deep understanding of our production and corporate environments, from applications to infrastructure, keeping up-to-date with material changes and future directions
• Partnering closely with other technical teams within the Security Organization and across engineering and other functions to harden accounts, platforms, and service structures to combat intrusions, hijackings, and potential compromises
• Developing early warning systems to detect, respond, and mitigate risks to the business as well as the customer environment
• Developing, maintaining, and monitoring the adoption of sound Cloud security practices
• Ownership of vulnerability management and patching policies of Virtual machines, Containers and Kubernetes infrastructure
• Identify and help mitigate security issues and misconfigurations related to Cloud services, Virtual machines, Containers and Kubernetes infrastructure
• Ownership and management of preventative security measures and services such as WAF, SIEM and similar security solutions.
• Continuously improving security as the company scales, driving continuous improvement through data collection and correlation, being mindful that security should be an efficiency enabler for the business, not a detractor

Required Skills and Qualifications

To succeed in this position, you will need:

• 5+ years of experience automating security tooling, alerting, and remediation workflows, especially security event enrichment, reduction, and correlation
• Vulnerability Management experience, focused on prioritizing known vulnerabilities for remediation at scale and classifying previously unknown vulnerabilities
• A strong understanding of Linux systems and common O/S hardening practices
• Hands-on experience with cloud service providers, Amazon Web Services (AWS) is a core requirement, while familiarity with Google Cloud Platform (GCP) is a strong advantage
• A strong understanding of systems in a multi-tenant, cloud environment
• Clear written and verbal communication skills to include: technical writing, presenting, coaching, mentoring
• Bonus: Experience in one or more of the following areas:
• Endpoint Intrusion Detection, Response, and Remediation, open source or commercial
• Configuration as Code software and methods (eg, Chef, Salt, Ansible)
• Message Bus Architectures and Data Processing Pipelines (eg, Kafka)
• Log management (e.g., ELK, Splunk, BigQuery)
• Engineering and maintaining Identity and Access management systems (e.g., OpenLDAP, Okta, VPN or Zero Trust)

What We Offer

At DO, you'll do the best work of your career. You will work with some of the smartest and most interesting people in the industry. Our organization development team will provide you with resources to ensure you keep growing. We provide employees with reimbursement for relevant conferences, training, and education. All employees have access to LinkedIn Learning's 10,000+ courses to support their continued growth and development.

Benefits

We prioritize career development and employee well-being. Our competitive array of benefits includes:

• An Employee Assistance Program
• Local Employee Meetups
• Flexible time off policy

Why Choose Us?

We value diversity and inclusion. We recognize that diversity of thought and background builds stronger teams and products to serve our customers. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate based on race, religion, color, ancestry, national origin, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.