Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you’ll find your place here. We value winning together—while learning, having fun, and making a profound difference for the dreamers and builders in the world.
We’re looking for an Application Security Engineer who is passionate about partnering with engineers to ensure the safety of current products and features.
As a member of the Security Engineering team, you will report to the Manager of Security Engineering. You will drive coordination over our AppSec tooling, e.g. SAST, SCA, to ensure appropriate coverage across the business and drive strategic initiatives with engineering to close gaps.
You will collaborate with other security teams and the rest of DigitalOcean to drive secure software design, reduce security risk in the organization,
and empower engineers to make informed security decisions. Security at DO means solving incredibly complex problems at a high-scale that have real impact for our customers, our products, and the larger internet community.
What you’ll do:
Help drive operations of our deployed AppSec tooling, including SAST, SCA, and secrets management. You will synthesize findings into actionable, impactful priorities and work with engineering teams to close those gaps.
We like Semgrep, and believe it accelerates our ability to create guardrails around safe engineering practices. You will add to our growing corpus of custom, internal Semgrep rules.
Help accelerate the wider security organization through your secure engineering capabilities. You may build an AI agent to support the Trust & Safety organization or an alert pipeline for the SOC.
Design and build internal tooling to provide engineering teams with secure-by-default