Senior Infrastructure Security Engineer

• Establishing an understanding of DigitalOcean's production and corporate environments, including infrastructure applications, keeping up-to-date with material changes, and future directions.
• Partnering closely with the other technical teams within the Security Organization and across our engineering and other functions to harden accounts, platforms, and service structures to combat intrusions, hijackings, and potential compromises.
• Developing early warning systems to detect, respond to, and mitigate risks to the business as well as the customer environment.
• Develop, maintain, and monitor the adoption of sound Cloud security practices.
• Ownership of vulnerability management and patching policies of Virtual machines, Containers, and Kubernetes infrastructure.
• Identify and help mitigate security issues and misconfigurations related to Cloud services, Virtual machines, Containers, and Kubernetes infrastructure.
• Ownership and management of preventative security measures and services such as WAF, SIEM, and similar security solutions.
• Consistently improving security as the company scales, driving continuous improvement through data collection and correlation, being mindful that security should be an efficiency enabler for the business, not a detractor.
  

Requirements

• 5+ years of experience automating security tooling, alerting, and remediation workflows, especially security event enrichment, reduction, and correlation.
• Vulnerability Management experience focused on prioritizing known vulnerabilities for remediation at scale and classifying previously unknown vulnerabilities.
• Strong understanding of Linux systems and common O/S hardening practices.
• Hands-on experience with cloud service providers. Amazon Web Services (AWS) is a core requirement, while familiarity with Google Cloud Platform (GCP) is a strong advantage. Focus areas include security issues and misconfigurations across cloud services, virtual machines, containers, and Kubernetes infrastructure.
• Strong understanding of systems in a multi-tenant, cloud environment.
• Clear written and verbal communication skills, including : technical writing, presenting, coaching, and mentoring.
  

• Endpoint Intrusion Detection, Response, and Remediation, open source or commercial
• Configuration as Code software and methods (eg, Chef, Salt, Ansible)
• Message Bus Architectures and Data Processing Pipelines (eg, Kafka)
• Log management (e. g., ELK, Splunk, BigQuery)
• Engineering and maintaining Identity and Access management systems (e. g., OpenLDAP, Okta, VPN, or Zero Trust).