Staff Product Security Engineer, Secure Design (Kernel and Virtualization)

Owns security risk posture for virtualization stack at DigitalOcean. Builds threat models, proposes defense-in-depth mitigations, collaborates with kernel and virtualization teams, and promotes security culture. Reports to Manager of Secure Design on the Product Security team.

Deep familiarity with kernel security features (e.g., AppArmor, SELinux, Landlock), understanding of performance implications of code changes to Qemu/KVM, proven ability to partner with engineering teams on security problems, clear communication of vulnerability classes, working knowledge of containerization and CI/CD. Preferred: 5+ years systems code, secure architecture design, threat modeling, hardware side-channel mitigations, experience with Go, Rust, or C.