Note: The job is a remote job and is open to candidates in USA. DigitalOcean is a cloud and AI technology company building scalable infrastructure for developers and businesses. The Staff Network Security Engineer will secure global network infrastructure, provide technical leadership, architect secure solutions, and develop automated tools to protect edge, backbone, and datacenter environments.
Responsibilities
- Define and enforce network security architecture standards and principles to ensure our networks are architected with security as a foundational element
- Provide technical leadership and mentorship to security and network engineering teams, serving as a subject matter expert on network security-related matters
- Lead network security assessments, including threat modeling, intrusion detection, and protocol-level analysis to identify and mitigate sophisticated attack vectors
- Develop and deploy advanced security automation, tooling, and infrastructure-as-code to continuously validate security posture and enforce compliance at scale
- Collaborate with network engineers to integrate security controls and telemetry within SDN, BGP/MPLS, and network automation platforms
- Participate in incident response efforts related to network security incidents
- Drive the security review process for all network infrastructure or product changes, ensuring designs adhere to established security standards and best practices before deployment
- Promote security best practices through documentation, tooling, and cross-team collaboration
Skills
- 8-10 years of experience in network security engineering, network penetration testing, or security-focused infrastructure roles
- Excellent communication skills to effectively collaborate with both technical and non-technical stakeholders, explaining complex security concepts and advocating for security best practices
- Deep understanding of Layer 2/3/4 networking protocols (BGP, OSPF, IS-IS, VRRP, LACP) and their security implications
- Deep understanding of distributed denial-of-service (DDoS) attack vectors and mitigation strategies, including packet filtering, rate limiting, and scrubbing services
- Extensive experience in designing and building secure networks from the ground up
- Experience leading projects and providing technical guidance to cross-functional teams
- Proficiency in scripting/programming languages such as Python or Go for automation and tooling
- Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena network platforms
- Strong Linux experience and familiarity with firewall, routing, and DNS security
- Understanding and experience with Network Intrusion Detection principles and tooling
- Knowledge of MPLS, BGP-LU, and SDN architectures from a security perspective
- Hands-on experience with observability tools like Prometheus, Grafana, and ELK stack
- Comfortable with Git-based workflows and collaborative development
- Open-source contributions related to network security
- Background in security incident response or red/blue team operations
Benefits
- Resources to ensure employees keep growing and developing
- Reimbursement for relevant conferences, training, and education
- Access to LinkedIn Learning's 10,000+ courses
- Employee Assistance Program
- Local Employee Meetups
- Flexible time off policy
- You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company and individual performance.
- Equity compensation to eligible employees, including equity grants upon hire
- Option to participate in the Employee Stock Purchase Program
Company Overview
Company H1B Sponsorship