Staff Product Security Engineer

About the role

UpGuard is hiring its first dedicated product security engineer, a Staff-level individual contributor role with significant ownership over the direction of product security as the company scales. You will work across product and production environments, collaborating with product engineering and platform teams to secure products, CI/CD pipelines and production systems, and embed security into how they build. The role is fully remote, with optional offices in Sydney and Hobart.

Key responsibilities

• Lead threat modelling and security reviews across the product portfolio and cloud infrastructure, surfacing attack vectors and designing mitigations.
• Build automation, policy-as-code and AI-driven security tooling that shifts security left across the SDLC, using agentic workflows to triage and review.
• Design secure-by-default configurations for cloud and Kubernetes infrastructure.
• Own vulnerability management end-to-end, prioritising by real risk and driving remediation with engineering teams.
• Build scalable detection and response systems and run incidents end to end.
• Build partnerships with product engineering and platform teams to deliver secure-by-design solutions.

Required profile

• 7+ years of experience in security engineering, software engineering or security operations in cloud environments.
• Experience leading technical security reviews, threat modelling and turning findings into engineering controls.
• Knowledge of common web application vulnerabilities such as the OWASP Top 10.
• Hands-on experience with infrastructure-as-code tools, preferably Terraform or OpenTofu.

Required skills

• Cloud security (GCP preferred, AWS or Azure welcome).
• Kubernetes services (EKS/GKE/AKS) and container security.
• Securing IAM and cloud identities.
• Preferred: AI/LLM security (OWASP LLM Top 10), Go, SOC 2 / ISO 27001 audit support, public security research, offensive security.

What we offer

• WFH set-up allowance and monthly lifestyle subsidy.
• $1,500 USD annual learning and development allowance.
• PTO plus two extra UpGuardian leave days, 18 weeks paid parental leave, personal leave allowance.
• Top-spec laptops, generative AI subscription subsidy and stock options.