Director, Security Products – Key Management

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Report directly to the VP, Deputy CISO and collaborate with the Security Data Science and Security leadership teams.

• Spearhead DigitalOcean’s involvement with the external AI security community.

• Act as the internal authority and escalation point for AI-related security risks.

• Collaborate with Product Security and Engineering leadership to establish AI security controls for customer-facing products.

• Develop, implement, and maintain in-house AI/ML models, guardrails, tooling, and automation processes.

• Monitor deployed models for performance drift and implement necessary enhancements.

• Lead adversarial testing and AI red teaming efforts, including jailbreaking, prompt injection, evasion, and poisoning assessments.

• Oversee security reviews of significant AI product initiatives from conception to launch.

• Provide architectural approvals and escalation advice for high-risk decisions.

• Conduct threat modeling for the AI lifecycle, encompassing data ingestion, training/fine-tuning, evaluation, model serving, RAG, agent frameworks, and post-deployment monitoring.

• Take ownership of DigitalOcean’s AI Security strategy and multi-year roadmap.

• Architect and manage the AI Risk & Governance framework across both DigitalOcean and Cloudways.

• Establish policies, standards, and controls for responsible AI/ML development, deployment, and oversight.

• Represent AI security in briefings for executives and board members.

• Define DigitalOcean’s stance on emerging AI security issues.

⛳️ Requirements

• Over 10 years of experience in the field of cybersecurity.

• A minimum of 4–5 years dedicated to AI/ML security, adversarial machine learning, or security data science within a production cloud or technology environment.

• Proven history of defining and leading AI or security initiatives at an organizational scale.

• Practitioner-level expertise in adversarial ML attacks and defenses, including evasion, poisoning, model extraction, membership inference, and prompt injection.

• Ability to assess and integrate academic AI security research into engineering guidance and organizational policies.

• Experience engaging with executive and senior leadership on technical risks.

• Strong programming capabilities in Python and Go.

• Proven record of developing security tools and automation processes.

• Proficient in reviewing and evaluating AI/ML system architectures.

• Hands-on experience with AI red-team and defensive tooling, as well as model supply-chain frameworks.

• Bachelor’s or Master’s degree in Computer Science, Information Security, Mathematics, or a related field — or equivalent practical experience.

• Familiarity with OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, ISO/IEC 42001, and the EU AI Act.

• Previous experience in a cloud provider, security product company, or large-scale internet platform where AI/ML systems operate at significant customer-facing scales.

• Understanding of production LLM security, including RAG pipelines, agentic frameworks, and model APIs.

🏝️ Benefits

• Coverage for relevant conferences, training, and educational opportunities.

• Access to over 10,000 courses through LinkedIn Learning.

• Employee Assistance Program.

• Opportunities for local employee meetups.

• Flexible time-off policy.

• Eligibility for bonuses based on both company and individual performance.

• Equity compensation for qualifying employees.

• Equity grants provided upon hiring.

• Option to join the Employee Stock Purchase Program.