Top Cybersecurity Jobs

Lead the design and implementation of an integrated ISO-focused compliance program, expand product-level certification scope, run risk assessments and remediation, author security policies, design engineering-friendly controls, manage cross-functional compliance projects, support incident response and customer compliance inquiries, and serve as the GRC subject-matter expert to mature SOC 2, HIPAA, and multiple ISO standards.

Lead design and implementation of a multi-standard compliance program (ISO/SOC2/HIPAA). Manage risk assessments, maintain risk register, author security policies, drive cross-functional remediation, support incident response and customer compliance inquiries, and integrate controls into engineering workflows to balance compliance with velocity.

Lead architecture and delivery of DigitalOcean's audit logging, SIEM integrations, and unified security visibility platform. Define multi-year roadmap, design high-throughput Go-based telemetry pipelines, ensure compliance-grade immutable audit records, build customer-facing visibility/control planes, and drive org-wide logging standards while mentoring engineers and coordinating cross-team integrations for consistent, high-fidelity security telemetry.

Define and drive the multi-year roadmap for audit logging, SIEM integration, and unified security visibility. Architect high-throughput, fault-tolerant Go/gRPC pipelines (Kafka/Flink), build customer-facing security dashboards and integrations, ensure compliance-grade immutable logs, set org-wide logging and observability standards, partner across platform teams, and mentor senior engineers while authoring RFCs.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Lead product strategy and delivery for customer-facing security and identity capabilities. Define roadmaps, translate complex IAM problems into developer-friendly console and API experiences, work with engineering to shape architecture, engage customers for discovery, and drive cross-functional launches and iteration to improve adoption and reduce security risk.

Lead and own the insider threat program: design detection, automate workflows, build/tune UEBA/SIEM/DLP/UAM detection content, investigate anomalous activity, collaborate with DFIR/Threat Intel/HR/Legal, perform large-scale data analytics and reporting, and improve metrics and playbooks to reduce risk and false positives.

Lead and evolve the insider threat program by engineering detection, automating investigation workflows, tuning UEBA/SIEM/DLP/UAM/SOAR detection content, conducting threat hunting and DFIR, collaborating with HR/Legal, and using data analytics (e.g., Pandas) to investigate anomalous activity and reduce internal risk.

Lead architecture and implementation of network security across edge, backbone, and datacenter environments. Provide technical leadership, conduct threat modeling and network security assessments, build security automation and IaC, integrate controls into SDN/BGP/MPLS systems, participate in incident response, and drive security reviews and best practices across teams.

Lead threat modeling and risk management for DigitalOcean's virtualization stack. Build frameworks and rubrics to assess hypervisor risk, propose and implement defense-in-depth mitigations, collaborate with engineering teams on remediation, mentor teams on secure design, and help oversee vulnerability management and security guidance.