> Markdown version of [/jobs/ext/673721-staff-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/673721-staff-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Network Security Engineer

- **Company:** DigitalOcean, LLC
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $168,800.0 - $211,000.0
- **Contract:** Permanent contract
- **Skills:** Link Aggregation (Ethernet), Artificial Intelligence, Software System Penetration Testing, Border Gateway Protocol, Cloud Computing, Linux, Domain Name System Security Extensions, Intrusion Detection and Prevention, Multi-protocol Systems, Python (Programming Language), Network Security, Network Architecture, Network Intrusion Detection Systems, Routing, Network Protocols, Open Shortest Path First (OSPF), Digitalocean, Prometheus, Virtual Router Redundancy Protocols, Computer Networking Systems, Grafana, Firewalls (Computer Science), Juniper, Git Flow, Cloudflare, Free and Open-Source Software, Ddos, Open Network Automation Platform, Blue Team (Cyber Security), Elk Stack, Vulnerability Analysis
- **Published:** June 27, 2026
- **Apply:** https://www.dice.com/job-detail/517d0c46-baa2-4351-a597-52dcf3fd4f8a

## About the Role

* 8-10 years of experience in network security engineering, network penetration testing, or security-focused infrastructure roles
 * Excellent communication skills to effectively collaborate with both technical and non-technical stakeholders, explaining complex security concepts and advocating for security best practices
 * Deep understanding of Layer 2/3/4 networking protocols (BGP, OSPF, IS-IS, VRRP, LACP) and their security implications
 * Deep understanding of distributed denial-of-service (DDoS) attack vectors and mitigation strategies, including packet filtering, rate limiting, and scrubbing services
 * Extensive experience in designing and building secure networks from the ground up
 * Experience leading projects and providing technical guidance to cross-functional teamsProficiency in scripting/programming languages such as Python or Go for automation and tooling
 * Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena network platforms
 * Strong Linux experience and familiarity with firewall, routing, and DNS security
 * Understanding and experience with Network Intrusion Detection principles and tooling
 * Knowledge of MPLS, BGP-LU, and SDN architectures from a security perspective
 * Hands-on experience with observability tools like Prometheus, Grafana, and ELK stack
 * Comfortable with Git-based workflows and collaborative development

Bonus Skills Include:

 * Open-source contributions related to network security
 * Background in security incident response or red/blue team operations, * We innovate with purpose. You'll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions.

## Description

As a Staff Network Security Engineer at DigitalOcean, you will join a dynamic team dedicated to revolutionizing cloud computing and AI. In this role, you will act as a key technical leader, responsible for securing our global network infrastructure by partnering with engineering teams to advise on secure architecture. This position, which reports to the Manager, Security Defense Engineering, involves architecting and building automated security tools and championing best practices to ensure our network remains resilient against evolving threats across our edge, backbone, and datacenter environments.
What You'll Do:

 * Define and enforce network security architecture standards and principles to ensure our networks are architected with security as a foundational element
 * Provide technical leadership and mentorship to security and network engineering teams, serving as a subject matter expert on network security-related matters
 * Lead network security assessments, including threat modeling, intrusion detection, and protocol-level analysis to identify and mitigate sophisticated attack vectors
 * Develop and deploy advanced security automation, tooling, and infrastructure-as-code to continuously validate security posture and enforce compliance at scale
 * Collaborate with network engineers to integrate security controls and telemetry within SDN, BGP/MPLS, and network automation platforms
 * Participate in incident response efforts related to network security incidents
 * Drive the security review process for all network infrastructure or product changes, ensuring designs adhere to established security standards and best practices before deployment
 * Promote security best practices through documentation, tooling, and cross-team collaboration


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [5 steps for running a Kubernetes environment at scale](https://www.wearedevelopers.com/videos/88-5-steps-for-running-a-kubernetes-environment-at-scale)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [All your telemetry data from any source in one place](https://www.wearedevelopers.com/videos/57-all-your-telemetry-data-from-any-source-in-one-place)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)