Staff Product Security Engineer

About the role

UpGuard is seeking its first dedicated product security hire to define and lead the security roadmap for its Cyber Risk Posture Management platform. This Staff-level role involves building security standards, tooling, and practices from the ground up while collaborating with product and platform teams. You will have significant autonomy to shape the security posture of a cloud-native environment as the company scales.

Responsibilities

• Lead threat modelling and security reviews across the product portfolio and cloud infrastructure.
• Build automation, policy-as-code, and AI-driven security tooling to enable shift-left security practices.
• Design and implement secure-by-default configurations for cloud and Kubernetes infrastructure.
• Manage vulnerability lifecycles end-to-end, driving remediation and preventative controls.
• Build scalable detection and response systems to identify and mitigate malicious activity.
• Partner with product engineering and platform teams to deliver secure-by-design solutions.

Required skills

• Cloud security
• GCP
• Kubernetes
• Container security
• IAM
• Threat modelling
• OWASP Top 10
• Infrastructure as Code
• Terraform

Nice to have

• AI security
• LLM security
• Go
• SOC 2
• ISO 27001
• Offensive security

Qualifications

• 7+ years of experience in security engineering, software engineering, or security operations

Benefits

• WFH set-up allowance
• Monthly lifestyle subsidy
• Annual learning and development allowance
• Paid parental leave
• Stock options
• Generative AI tool subscription
• Top-spec hardware

About the Company

UpGuard is a cyber risk management company that replaces manual security bottlenecks with AI-driven precision. They build the Cyber Risk Posture Management platform, integrating security ratings, threat intelligence, and agentic AI to help organizations manage their attack surface.