Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Staff Product Security Engineer role.
Rezi rewrites your resume against UpGuard Inc.'s job description. Free.
Tailor your resume to this Staff Product Security Engineer role.
Rezi rewrites your resume against UpGuard Inc.'s job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Staff Product Security Engineer posting at UpGuard Inc. — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Staff Product Security Engineer posting at UpGuard Inc. — free, in seconds.
About the Role
This is UpGuard's first dedicated product security hire, offering significant ownership over the direction of product security as the company scales. The role involves defining security standards, tooling, and practices to protect UpGuard's products and infrastructure. You will perform security reviews, manage vulnerabilities, and run detection and response operations in cloud-native infrastructure, collaborating with product engineering and platform teams to embed security from the ground up. In the first 6-12 months, you will refresh threat modeling and security reviews, explore AI applications in AppSec, and harden GCP and Kubernetes configurations. This Staff-level individual contributor role offers genuine autonomy and influence in defining the security roadmap and scaling security posture.
Responsibilities
- Lead threat modeling and security reviews across UpGuard's product portfolio and cloud infrastructure, proactively surfacing attack vectors and designing mitigation strategies.
- Build automation, policy-as-code, and AI-driven security tooling to enable product engineering teams to 'shift left' and embed security across the SDLC.
- Design and implement secure-by-default configurations for cloud and Kubernetes infrastructure.
- Own vulnerability management end-to-end, including triaging, prioritizing, driving remediation, and building preventative controls across the software supply chain.
- Build scalable detection and response systems to catch malicious activity and manage incidents.
- Build deep partnerships with product engineering and platform teams to deliver secure-by-design solutions.
Requirements
- 7+ years of experience in security engineering, software engineering, or security operations, with a focus on cloud environments.
- Cloud security experience (GCP preferred, AWS or Azure accepted).
- Experience with cloud-native Kubernetes services (EKS/GKE/AKS) and strong container security principles.
- Strong understanding of securing IAM and cloud identities.
- Experience leading technical security reviews of products and architectures, running threat modeling exercises, and translating findings into implementable security controls.
- Strong knowledge of common web application vulnerabilities and prevention strategies (OWASP Top 10 and similar).
- Hands-on experience with IAC and related tools (preferably Terraform/OpenTofu).
Skills
- Cloud security
- Kubernetes
- IAM
- Threat modeling
- Vulnerability management
- Secure-by-default configurations
- Infrastructure-as-code (IAC)
- Web application security
- Automation
- Policy-as-code
- AI-driven security tooling
- Detection and response systems
- Backend engineering (Go)
- SOC 2 / ISO 27001 audits
- Offensive security
Location
- Fully remote
Work Type
- Fully remote
Experience Level
- Staff-level individual contributor
- 7+ years of experience
Benefits
- WFH set-up allowance
- Monthly Lifestyle subsidy
- $1500 USD annual Learning & Development allowance
- Annual leave (PTO plus two additional UpGuardian leave days)
- 18 weeks paid Parental Leave
- Personal Leave Allowance (sick & carer’s leave)
- Fully remote working environment
- Top-spec hardware
- Generative AI subsidy
- Stock options
About the Company
- UpGuard is replacing manual security bottlenecks with AI-driven precision, processing 100 billion risk signals daily to reimagine cyber risk management.
- The company builds the Cyber Risk Posture Management (CRPM) platform, integrating security ratings, threat intel, and agentic AI to help organizations stay ahead of evolving attack surfaces.
- UpGuard is defining a category in security, providing autonomy and resources for global-scale technology development.
- UpGuard is a Certified Great Place to Work® in the US, Australia, UK and India.
Equal Opportunity
- As an Equal Employment Opportunity and Affirmative Action Employer, qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.