Director, Security Products – Key Management
Job Description:
- Report to the VP, Deputy CISO
- Partner with Security Data Science and Security leadership teams
- Lead DigitalOcean’s engagement with the external AI security community
- Serve as the internal expert and escalation point for AI-related security risk
- Define integration of AI security controls into customer-facing products
- Build, deploy, and serve in-house AI/ML models, guardrails, tooling, and automations
- Monitor deployed models for drift and performance, and implement improvements
- Lead adversarial testing and AI red teaming, including jailbreaking, prompt-injection, evasion, and poisoning testing
- Lead security reviews of major AI product initiatives from design through launch
- Provide architectural sign-off and escalation guidance for high-risk decisions
- Threat model across the AI lifecycle, including data ingestion, training, evaluation, model serving, RAG, agent frameworks, and post-deployment monitoring
- Own DigitalOcean’s AI Security strategy and multi-year roadmap
- Architect and lead the AI Risk & Governance framework across DigitalOcean and Cloudways
- Establish AI/ML policies, standards, and controls
- Represent AI security in executive and board-level briefings
- Communicate risk posture, program progress, and strategic decisions to the CISO and senior leadership
- Define DigitalOcean’s position on emerging AI security topics
Requirements:
- 10+ years of experience in cybersecurity
- At least 4–5 years focused on AI/ML security, adversarial machine learning, or security data science in a production cloud or technology environment
- Track record of defining and driving AI or security programs at an organizational level
- Practitioner-level knowledge of adversarial ML attacks and defenses, including evasion, poisoning, model extraction, membership inference, and prompt injection
- Ability to evaluate academic AI security research and translate it into engineering guidance and organizational policy
- Experience engaging executive and senior leadership audiences on technical risk
- Strong programming skills in Python and Go
- Experience building security tooling and automation
- Proficiency reviewing AI/ML system architecture, including data ingestion, feature engineering, training pipelines, model serving, and continuous monitoring
- Hands-on experience with AI red-team and defensive tooling and model supply-chain frameworks
- Bachelor’s or Master’s degree in Computer Science, Information Security, Mathematics, or a related field, or equivalent depth of practical experience
- Fluency in OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, ISO/IEC 42001, and the EU AI Act
- Prior experience in a cloud provider, security product company, or large-scale internet platform with significant customer-facing AI/ML scale
- Familiarity with production LLM security, including RAG pipelines, agentic frameworks, and model APIs
- Ability to secure systems against prompt injection, jailbreaking, and data exfiltration
Benefits:
- Reimbursement for relevant conferences, training, and education
- Access to LinkedIn Learning's 10,000+ courses
- Employee Assistance Program
- Local Employee Meetups
- Flexible time off policy
- Competitive benefits array, varying based on local regulations and preferences
- Potential bonus based on company and individual performance
- Equity compensation for eligible employees, including equity grants upon hire
- Option to participate in the Employee Stock Purchase Program