We are looking for a Trust & Safety Analyst who is passionate about making the internet a safer place for everyone.
As a Trust & Safety Abuse Analyst at DigitalOcean, you will join a dynamic team dedicated to revolutionizing cloud computing & AI. In this role, you will be a key member of DigitalOceans security team, reporting to the Senior Manager of Abuse Operations inside a virtual SOC. You will protect DigitalOcean by proactively investigating & actioning cloud abuse & fraud with advanced threat hunting to help maintain a strong reputation. Security Operations Analysts must excel at understanding cloud abuse, fraudulent customer behaviors, & know how to perform technical investigations to confirm violations of our terms of service & acceptable use policies effectively mitigating risks associated with & activities on the DigitalOcean platform.
As a Trust & Safety Abuse Analyst at DigitalOcean, you will be a pivotal member of our security team, reporting to the Senior Manager of Abuse Operations within a virtual SOC. Your primary responsibility will be to safeguard DigitalOcean's reputation by proactively investigating & mitigating cloud abuse & fraud. This dynamic role requires a keen understanding of fraudulent customer behaviors & the ability to conduct advanced threat hunting & technical investigations to confirm violations of our terms of service & acceptable use policies, thereby effectively mitigating risks on the DigitalOcean platform. You will be instrumental in our mission to revolutionize cloud computing & AI.
What Youll Do:
- Developing & owning processes that enforce DigitalOcean's Acceptable Use Policy, which includes incoming reports of spam, denial of service, malware, botnets, phishing, bruteforce, & insecure services.
- Evaluating in a hands-on manner cloud abuse, communicating with submitters, & helping customers stay mission focused with DigitalOcean.
- Handling customer investigations & triaging corporate alerts, in a customer-facing & transparent manner, to minimize the impact of bad actors on the internet.
- Analyzing network traffic for compromised systems, negating denial of service attacks, & locating resource abuse to maintain clean IP reputation.
- Locating trends in abuse, communicating with leadership to apprise the extent of issues, & advocating for appropriate product changes to prevent future occurrences.
- Designing & executing department-wide projects that improve the efficiency & quality of work, while reducing abuse on the platform.
- Investigating, identifying & mitigating cloud abuse such as DDoS attacks, malware distribution networks, phishing attacks, etc.
- Uncovering novel malicious trends of abuse, communicating the significance to leadership, & advocating for improved product protections.
- Proactively hunting for threats, purple teaming activities, & working with penetration testers on product abuse research.
- Acting as point of contact for incident management & customer escalations, as well as providing data support for critical issues.
- Building strong relationships with the other technical teams across our engineering & infrastructure functions.
- Establishing an understanding of DigitalOceans entire production environment, from applications to infrastructure, keeping up-to-date with material changes & future directions.
- Coaching & mentoring other skilled security practitioners across application, information, & infrastructure security.
What Youll Add to DigitalOcean:
- 3+ years of experience in Trust & Safety, Abuse Operations, Emergency Response, Security Operation Center, or Cloud Security.
- Excellent analytical, troubleshooting, & problem-solving skills.
- Subject matter expertise in cloud hosting attacks & abuse.
- Strong ability to prove technical attacks, validate claims, spot malicious patterns, & assist customers in removing or correcting violations of service policies.
- Familiarity with Unix/Linux operating systems & command-line interface.
- Creative problem-solving skills, using previous approaches as references rather than strict guidelines.
- Intellectual curiosity & self-motivation to perform complex tasks & overcome security obstacles at scale, both reactively & proactively.
- Passion for security & the safety of employees, customers, & the internet.
- Clear written & verbal communication skills, including technical writing, presenting, coaching, & mentoring.
- Ability to provide & receive clear, direct, & constructive feedback for continuous improvement.
Bonus:
- Threat intelligence collection & investigation based hunting.
- Network or cloud security investigations.
- Coding, scripting, or automation skills (Python, Bash, Go, SQL).
- Data analysis skills as it relates to relational databases, SQL, logging infrastructures, data visualization tools (e.g: Looker, Grafana, Elastic)
- Experience performing troubleshooting, investigations, or alert triage in a hands-on technical capacity.
- Familiarity with IP monitoring tools & trust & safety abuse monitoring tools (abuseipdb, netcraft, abusix).
Why Youll Like Working for DigitalOcean:
- We innovate with purpose. Youll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud & AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, & scrappy, like an owner with a bias for action & a powerful sense of responsibility for customers, products, employees, & decisions.
- We prioritize career development. At DO, youll do the best work of your career. You will work with some of the smartest & most interesting people in the industry. We are a high-performance organization that will always challenge you to think big. Our organizational development team will provide you with resources to ensure you keep growing. We provide employees with reimbursement for relevant conferences, training, & education. All employees have access to LinkedIn Learning's 10,000+ courses to support their continued growth & development.
- We care about your well-being. Regardless of your location, we will provide you with a competitive array of benefits to support you from our Employee Assistance Program to Local Employee Meetups to flexible time off policy, to name a few. While the philosophy around our benefits is the same worldwide, specific benefits may vary based on local regulations & preferences.
- We reward our employees. The salary range for this position is $84,000 - $105,000 based on market data, relevant years of experience, & skills. You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company & individual performance. We also provide equity compensation to eligible employees, including equity grants upon hire & the option to participate in our Employee Stock Purchase Program.
- We value diversity & inclusion. We are an equal-opportunity employer, & recognize that diversity of thought & background builds stronger teams & products to serve our customers. We approach diversity & inclusion seriously & thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.
*This is a remote role.
#LI-Remote
|