Remote opportunity at
UpGuardStaff Product Security Engineer
UpGuard is scaling its cyber risk posture management platform to process a massive volume of daily risk signals, and is currently seeking a Staff Product Security…
Career Tools
About This Role
UpGuard is scaling its cyber risk posture management platform to process a massive volume of daily risk signals, and is currently seeking a Staff Product Security Engineer to join the team. Operating as the organization's initial dedicated product security hire, this role offers tremendous ownership over the security standards, tooling, and practices that safeguard production environments. This position suits an experienced individual contributor who wants to establish a security function…
Job Description
UpGuard is scaling its cyber risk posture management platform to process a massive volume of daily risk signals, and is currently seeking a Staff Product Security Engineer to join the team. Operating as the organization's initial dedicated product security hire, this role offers tremendous ownership over the security standards, tooling, and practices that safeguard production environments.
This position suits an experienced individual contributor who wants to establish a security function from the ground up rather than inherit prior setups. Working closely with product engineering and platform teams, the professional in this role will drive threat modeling, enhance cloud-native infrastructure security, manage vulnerabilities, and implement automated AppSec practices.
The company embraces a fully remote working model with optional office availability in Sydney and Hobart. The engineering culture encourages rapid iteration, collaboration, pragmatism, and low ego. Candidates will benefit from executive backing at a firm where product security serves as a core business driver. While remote work is supported globally, certain United States locations have specific hiring constraints, and candidates must undergo reference checks and a national police history check prior to starting.
Responsibilities
- Lead threat modeling and security reviews across the product portfolio and cloud infrastructure
- Develop automation, policy-as-code, and AI-driven security tooling to help engineering teams shift security left
- Design and implement secure-by-default configurations for cloud and Kubernetes environments
- Manage vulnerabilities end-to-end by triaging risks and driving remediation alongside engineering teams
- Build scalable detection and response systems to catch malicious activity and manage incidents
- Establish deep partnerships with product engineering and platform groups to promote secure-by-design solutions
Requirements
- Seven or more years of professional experience in security engineering, software engineering, or security operations
- Demonstrated background in cloud security, preferably with GCP, alongside experience with AWS or Azure
- Familiarity with cloud-native Kubernetes services and robust container security principles
- Strong comprehension of securing IAM and cloud identities
- Experience leading technical security reviews and conducting threat modeling exercises
- Extensive knowledge of common web application vulnerabilities and prevention strategies
- Hands-on practice with infrastructure-as-code tools such as Terraform or OpenTofu
Qualifications
- Prior background operating as the initial security hire or founding member at a scaling company
- Familiarity with AI and LLM security risks alongside securing AI-driven product features
- Strong backend engineering capabilities, specifically utilizing Go
- Experience assisting with SOC 2 or ISO 27001 audits from an engineering perspective
- Public security research, CVE publications, open-source security tooling contributions, or conference speaking history
- Offensive security expertise capable of validating discoveries via manual exploitation
Core Skills
Benefits
- Work-from-home setup allowance provided during the first three months
- Monthly lifestyle subsidy for physical, financial, and mental well-being
- Annual learning and development allowance of 1,500 USD
- Paid annual leave plus two extra company recharge days
- Eighteen weeks of paid parental leave regardless of parenting role
- Personal leave allowance covering sick and carer's leave
- Top-spec laptop provided for the role
- Paid subscription for generative AI tools
- Stock options tied to company growth
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, this is a fully remote role with optional office access in Sydney and Hobart, and no mandatory office attendance.
What is the employment type?
The posting specifies that this is a full-time, Staff-level individual contributor role.
What salary is offered for this role?
The salary is not stated in the job posting.
Are there specific location restrictions for applicants based in the United States?
Yes, US applicants can only be supported if they reside in CA, CO, FL, IL, MA, MD, MO, OR, PA, TX, WA, or DC.
What pre-employment screening is required?
Candidates must complete a national police history check and reference checks before starting work.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
