Staff Security Engineer – Product, Cloud

Job not on LinkedIn

🕒 4 days ago

🇦🇺 Australia – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

UpGuard

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

💼 Consulting

🛡️ Insurance

🏥 Healthcare

Consulting • Insurance • Healthcare

UpGuard is a comprehensive third-party risk and attack surface management platform. The company provides solutions for vendor risk management, including features like automated risk assessments, security ratings, and data leak detection. UpGuard's platform integrates AI to enhance security questionnaires and provides real-time alerts, ensuring continuous monitoring and complete visibility of security postures. Its services are utilized by industries such as financial services, technology, and healthcare to secure customer data and streamline trust management process with advanced cybersecurity tools.

📋 Description

• Define the direction, standards, tooling, and practices for product security at UpGuard • Perform security reviews across product and production environments • Manage vulnerabilities and run detection and response operations in cloud-native infrastructure • Collaborate with product engineering and platform teams to secure products, CI/CD pipelines, and production systems • Refresh threat modelling and security review as standard parts of the software delivery process • Evaluate and build effective AI-driven application security tooling for code review, triage, and coverage • Harden GCP and Kubernetes baselines and implement secure-by-default infrastructure-as-code configurations • Lead threat modelling and security reviews across the product portfolio and cloud infrastructure • Build automation, policy-as-code, and AI-driven security tooling to embed security across the SDLC • Design and implement secure-by-default cloud and Kubernetes configurations • Own vulnerability management end-to-end, including risk-based triage, prioritization, remediation, and preventative software-supply-chain controls • Build scalable detection and response systems and run incidents end to end • Build partnerships with product engineering and platform teams to deliver secure-by-design solutions • Define the security roadmap, drive best practices, and scale UpGuard’s security posture

🎯 Requirements

• 7+ years of experience in security engineering and/or software engineering and/or security operations • Experience working in cloud environments • Cloud security experience; GCP preferred, with AWS or Azure also welcome • Experience with cloud-native Kubernetes services such as EKS, GKE, or AKS • Strong container security principles • Strong understanding of IAM and cloud identities • Experience leading technical security reviews of products and architectures • Experience running threat modelling exercises and translating findings into implementable security controls • Strong knowledge of common web application vulnerabilities, including OWASP Top 10 • Hands-on experience with infrastructure as code, preferably Terraform or OpenTofu • Experience as a first security hire or founding security-function member is advantageous • Familiarity with AI/LLM security risks, such as OWASP LLM Top 10, is advantageous • Strong backend engineering skills, particularly in Go, are advantageous • Experience supporting SOC 2 or ISO 27001 audits is advantageous • Public security research, CVEs, open-source security tooling, or conference talks are advantageous • Offensive security skills and hands-on exploitation experience are advantageous • Ability to pass a national police history check and reference checks • Australian work authorization without requiring company visa sponsorship

🏖️ Benefits

• WFH set-up allowance • Monthly Lifestyle subsidy for financial, physical, and mental well-being • $1500 USD annual Learning & Development allowance • Annual leave/PTO plus two additional UpGuardian leave days • 18 weeks paid Parental Leave • Personal Leave Allowance including sick and carer’s leave • Fully remote working environment with no mandatory office attendance • Top-spec laptop provided • Paid subscriptions for generative AI tools • Stock options

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume