Staff Network Security Engineer

DigitalOcean

Staff Network Security Engineer at DigitalOcean, focusing on securing global network infrastructure and partnering with engineering teams. Lead security assessments, and promote best practices in a dynamic team.

Posted 6/24/2026full-timeSeattle • Washington • 🇺🇸 United StatesLead💰 $168,800 - $211,000 per yearWebsite

Tech Stack

Tools & technologies

DNSGoGrafanaLinuxPrometheusPython

About the role

Key responsibilities & impact

Define and enforce network security architecture standards and principles
Provide technical leadership and mentorship to security and network engineering teams
Lead network security assessments, including threat modeling and intrusion detection
Develop and deploy advanced security automation, tooling, and infrastructure-as-code
Collaborate with network engineers to integrate security controls within SDN, BGP/MPLS
Participate in incident response efforts related to network security incidents
Drive the security review process for all network infrastructure or product changes
Promote security best practices through documentation, tooling, and collaboration

Requirements

What you’ll need

8-10 years of experience in network security engineering, network penetration testing, or security-focused infrastructure roles
Excellent communication skills to effectively collaborate with both technical and non-technical stakeholders
Deep understanding of Layer 2/3/4 networking protocols (BGP, OSPF, IS-IS, VRRP, LACP) and their security implications
Deep understanding of distributed denial-of-service (DDoS) attack vectors and mitigation strategies
Extensive experience in designing and building secure networks from the ground up
Experience leading projects and providing technical guidance to cross-functional teams
Proficiency in scripting/programming languages such as Python or Go
Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena network platforms
Strong Linux experience and familiarity with firewall, routing, and DNS security
Understanding and experience with Network Intrusion Detection principles and tooling
Knowledge of MPLS, BGP-LU, and SDN architectures from a security perspective
Hands-on experience with observability tools like Prometheus, Grafana, and ELK stack
Comfortable with Git-based workflows and collaborative development

Benefits

Comp & perks

Competitive salary
Flexible time off policy
Employee Assistance Program
Local Employee Meetups
Reimbursement for relevant conferences, training, and education
Access to LinkedIn Learning's 10,000+ courses
Equity compensation including grants and Employee Stock Purchase Program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

network security engineeringnetwork penetration testingsecurity automationinfrastructure-as-codeLayer 2/3/4 networking protocolsDDoS attack mitigationscripting languagesLinuxNetwork Intrusion DetectionMPLS

Soft Skills

technical leadershipmentorshipcommunicationcollaborationproject leadership