Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Lead DigitalOcean’s AI security strategy, governance framework, and multi-year roadmap. Secure AI/ML systems across data ingestion, training, model serving, RAG, agents, and monitoring. Conduct threat modeling, adversarial testing, AI red teaming, and security reviews; develop guardrails and automation with engineering teams. Advise executives and the board on AI risk, define organizational controls, and guide responses to emerging threats including prompt injection, model supply-chain risks, and AI-enabled social engineering.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.