Senior Product Security Engineer, Security Platform

About the role

Security Engineering team at DigitalOcean builds and operates application security tooling and processes to protect the platform and its customers. The role drives operations of SAST, SCA, and secrets management tools, creates custom Semgrep rules, and builds internal tooling in Go and Python to enable secure-by-default configurations for engineering teams. Bengaluru, hybrid (remote and on‑site), relocation available.

What you’ll do

• Operate and maintain AppSec tooling (SAST, SCA, secrets management)
• Synthesize findings into actionable priorities and work with engineers to remediate
• Develop custom Semgrep rules and internal security tooling
• Write robust, test‑covered code in Go and Python
• Collaborate with security and engineering teams on secure design
• Support Trust & Safety AI agent or SOC alert pipeline as needed

What you’ll bring

• 5+ years software engineering with security focus
• Proficient in Go, Python, JavaScript
• Experience building/reviewing threat models
• Knowledge of hardware/software supply chain security
• Understanding of OWASP Top Ten and vulnerability classes
• Ability to partner with engineering teams to close security gaps

Skills

Benefits

• Flexible time off
• Equity grants and employee stock purchase program
• Performance‑based bonus
• Learning resources including conference reimbursement and LinkedIn Learning