Latest AI JobsBrowse Jobs
U

Staff Product Security Engineer

UpGuardSydneyProduct
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
9 Sept 2026
Status
Open · checked 7d ago

About this role

UpGuard is seeking a Staff Product Security Engineer to join its product team in Sydney with fully remote work flexibility. This individual contributor role is tailored for a seasoned security professional looking to define the product security function at a rapidly scaling cyber risk management company.

Role Overview

As UpGuard's first dedicated product security hire, this position carries significant ownership over the security direction, standards, and tooling for cloud-native infrastructure and products. The professional in this role will work across product and production environments to execute security reviews, manage vulnerabilities, and handle detection and operations. The position partners closely with engineering and platform teams to embed security directly into the software development lifecycle from the ground up, with full executive backing and autonomy.

Key Responsibilities

Lead threat modelling and security reviews across the product portfolio and cloud infrastructure to surface attack vectors and design scalable mitigation strategies.
Build automation, policy-as-code, and AI-driven security tooling to enable product engineering teams to shift security left.
Design and implement secure-by-default configurations for cloud and Kubernetes environments.
Own vulnerability management end-to-end, prioritizing risks, driving remediation, and building preventative controls across the software supply chain.
Build scalable detection and response systems to spot malicious activity, reduce noise, and manage incidents.
Forge deep partnerships with product engineering and platform teams to deliver secure-by-design technology solutions.

Requirements

7+ years of professional background in security engineering, software engineering, or security operations within cloud environments.
Cloud security expertise, with a preference for GCP or experience with AWS or Azure.
Familiarity with cloud-native Kubernetes services like GKE, EKS, or AKS, alongside strong container security principles.
Comprehensive understanding of securing identity and access management (IAM) and cloud identities.
Demonstrated experience leading technical security reviews of architectures and products, executing threat modelling, and translating findings into actionable controls.
Solid knowledge of common web application vulnerabilities and prevention strategies, including the OWASP Top 10.
Hands-on experience with infrastructure-as-code tools such as Terraform or OpenTofu.

Nice to Have

Background as a founding member or first security hire at a scaling company.
Familiarity with securing AI-powered features and understanding AI and LLM security risks like the OWASP LLM Top 10.
Strong backend engineering skills, particularly using Go.
Experience supporting ISO 27001 or SOC 2 audits from an engineering perspective.
Public security research, CVEs, open-source tooling contributions, or conference speaking experience.
Offensive security skills with the ability to validate findings through hands-on exploitation.

Skills and Tools

AWS, GCP, Azure
Kubernetes (EKS, GKE, AKS)
Terraform / OpenTofu
AI and LLM security concepts
CI/CD pipeline security and Infrastructure-as-Code

Salary and Benefits

Fully remote working environment with optional offices in Sydney and Hobart and no mandatory attendance.
Work-from-home set-up allowance provided within the first three months.
Monthly lifestyle subsidy for physical, financial, and mental well-being.
Annual learning and development allowance of $1500 USD.
Paid annual leave plus two additional UpGuardian leave days.
18 weeks of paid parental leave regardless of parenting role.
Personal leave allowance covering sick and carer's leave.
Top-spec hardware laptops provided for the role.
Generative AI subsidy for paid subscriptions to generative AI tooling.
Stock options to share in the company's long-term success.

About the Company

UpGuard is replacing manual security bottlenecks with AI-driven precision and helping organizations manage cyber risk through its Cyber Risk Posture Management platform. Fresh off a US$75M Series C funding round, the company is scaling infrastructure to process billions of risk signals daily. Recognized as a Certified Great Place to Work in multiple regions, UpGuard provides a collaborative, no-ego engineering culture focused on iteration and global impact.

How to Apply

Interested candidates should apply directly on the official UpGuard careers page to submit their application and undergo the required reference and national police history checks.

Skills and tech stack

LLMKubernetesAWSGCPAzureGenerative AI

Questions candidates ask

Is this role remote?

Yes, this is a fully remote position with optional physical offices available in Sydney and Hobart and no mandatory office attendance.

What level of experience is required for this position?

Candidates must have 7+ years of experience in security engineering, software engineering, or security operations within cloud environments.

What specific cloud platforms are preferred?

GCP is preferred, though experience with AWS or Azure is also welcome.

What benefits and perks are included?

Benefits include a WFH set-up allowance, monthly lifestyle subsidy, $1500 USD annual learning and development allowance, 18 weeks paid parental leave, stock options, generative AI subscriptions, and top-spec hardware.

What background checks are required before starting?

Before starting work, candidates will need to complete a national police history check and reference checks.

Ready to apply?

The application is on the official UpGuard careers page.

Apply on company site