Staff Security Engineer – Product, Cloud

• Define the direction, standards, tooling, and practices for product security at UpGuard
• Perform security reviews across product and production environments
• Manage vulnerabilities and run detection and response operations in cloud-native infrastructure
• Collaborate with product engineering and platform teams to secure products, CI/CD pipelines, and production systems
• Refresh threat modelling and security review as standard parts of the software delivery process
• Evaluate and build effective AI-driven application security tooling for code review, triage, and coverage
• Harden GCP and Kubernetes baselines and implement secure-by-default infrastructure-as-code configurations
• Lead threat modelling and security reviews across the product portfolio and cloud infrastructure
• Build automation, policy-as-code, and AI-driven security tooling to embed security across the SDLC
• Design and implement secure-by-default cloud and Kubernetes configurations
• Own vulnerability management end-to-end, including risk-based triage, prioritization, remediation, and preventative software-supply-chain controls
• Build scalable detection and response systems and run incidents end to end
• Build partnerships with product engineering and platform teams to deliver secure-by-design solutions
• Define the security roadmap, drive best practices, and scale UpGuard’s security posture

• 7+ years of experience in security engineering and/or software engineering and/or security operations
• Experience working in cloud environments
• Cloud security experience; GCP preferred, with AWS or Azure also welcome
• Experience with cloud-native Kubernetes services such as EKS, GKE, or AKS
• Strong container security principles
• Strong understanding of IAM and cloud identities
• Experience leading technical security reviews of products and architectures
• Experience running threat modelling exercises and translating findings into implementable security controls
• Strong knowledge of common web application vulnerabilities, including OWASP Top 10
• Hands-on experience with infrastructure as code, preferably Terraform or OpenTofu
• Experience as a first security hire or founding security-function member is advantageous
• Familiarity with AI/LLM security risks, such as OWASP LLM Top 10, is advantageous
• Strong backend engineering skills, particularly in Go, are advantageous
• Experience supporting SOC 2 or ISO 27001 audits is advantageous
• Public security research, CVEs, open-source security tooling, or conference talks are advantageous
• Offensive security skills and hands-on exploitation experience are advantageous
• Ability to pass a national police history check and reference checks
• Australian work authorization without requiring company visa sponsorship

• WFH set-up allowance
• Monthly Lifestyle subsidy for financial, physical, and mental well-being
• $1500 USD annual Learning & Development allowance
• Annual leave/PTO plus two additional UpGuardian leave days
• 18 weeks paid Parental Leave
• Personal Leave Allowance including sick and carer’s leave
• Fully remote working environment with no mandatory office attendance
• Top-spec laptop provided
• Paid subscriptions for generative AI tools
• Stock options