Product Security Manager, Secure Design

DigitalOcean•Boston, MA

1d•Remote

About The Position

Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you’ll find your place here. We value winning together—while learning, having fun, and making a profound difference for the dreamers and builders in the world. We’re looking for a security manager passionate about enabling the business as a security partner to lead a team of Product Security engineers. You will manage a team of product security engineers dedicated to enabling DigitalOcean to build secure-by-design products, reporting to the Senior Manager of Product Security. Your primary mission is to empower this team to succeed - ensuring they have the strategy, support, and cross-functional relationships necessary to solve complex security problems at scale. You will partner with product and engineering leadership to assess risk, scale security impact via automation, and foster a culture where security is a paved path for developer success. We leverage strong relationships with both product teams and the rest of security engineering to be successful. Our scope is primarily focused on reviewing early-stage decisions, helping develop threat models, scaling impact via automation, curating security patterns, authoring security guidance, training, and championing security initiatives.

Requirements

Experienced management
You have 2+ years of experience leading a team of security engineers.
You are comfortable stepping into a role with 3-5 direct reports and have a track record of elevating senior talent and keeping them engaged and unblocked.
Servant leadership
You measure your own success by the success of your team.
You have a track record of defining clear priorities to reduce context switching, clearing operational paths so your engineers can focus on technical execution, and ensuring they receive visibility and credit for their work.
Technical context
You possess a deep background in Product Security, Application Security, or Secure Architecture.
You lead with technical credibility, having the ability to deep-dive into threat modeling architectural discussions and provide meaningful feedback on complex security problems.
DigitalOcean teams primarily build “under the cloud” (i.e. in data centers) providing the building blocks that operate a cloud product for our customers. You should be able to translate security expectations for cloud customers into underlying principles that must be embedded inside our product architectures and designs to ensure our products are safe for our customers, our business, and for the wider Internet.
Empathy & communication
You translate complex security risks (e.g. RetBleed, React2Shell) into business context for leadership, and you teach your team to communicate with empathy.