At a Glance
- Tasks: Lead product security initiatives and design scalable security solutions for cloud infrastructure.
- Company: UpGuard, a cutting-edge tech company redefining cyber risk management.
- Benefits: Competitive salary, flexible work options, and opportunities for professional growth.
- Other info: Be part of a dynamic environment with significant influence on security practices.
- Why this job: Join a pioneering team and shape the future of product security with AI-driven solutions.
- Qualifications: Experience in security engineering and a passion for innovative technology.
The predicted salary is between 81000 - 99000 $ per year.
Who are we?
At Up Guard, we are replacing manual security bottlenecks with AI-driven precision.
Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk signals daily.
This isn’t just growth; it’s a total reimagining of how the world manages cyber risk.
We build the Cyber Risk Posture Management (CRPM) platform that security teams actually love.
By integrating security ratings, threat intel, and agentic AI, we empower organisations to stay ahead of an ever evolving attack surface.
We aren’t just building another tool; we’re defining a category.
We provide the autonomy to ship world-class technology and the resources to do it at a global scale.
About The Role
This is Up Guard's first dedicated product security hire.
You'll have significant ownership over the direction of product security at Up Guard as we scale.
You won't be inheriting someone else's decisions.
You'll be defining the security standards, tooling, and practices that protect Up Guard's products and infrastructure for years to come.
In this role, you'll work across our product and production environments: performing security reviews, managing vulnerabilities, and running detection and response operations in our cloud-native infrastructure.
You'll collaborate closely with our product engineering and platform teams to secure our products, CI/CD pipelines, and production systems, and to embed security into how we build from the ground up.
About
The full remit of product security is broad, so we've been deliberate about sequencing. In your first 6-12 months you'll:
- Refresh threat modelling and security review as a standard part of how we ship.
- Figure out where AI actually helps in App Sec (code review, triage, coverage) and build what works
- Harden our GCP and Kubernetes baseline and get secure-by-default configs into infrastructure-as-code
The function sits at the heart of our engineering organisation, and you'll have genuine autonomy and influence: defining the security roadmap, driving best practices, and scaling our security posture as we grow.
This is a Staff-level individual contributor role.
What You'll Do
- Lead threat modelling and security reviews across Up Guard's product portfolio and cloud infrastructure, proactively surfacing attack vectors and designing mitigation strategies that scale with growth.
- Build automation, policy-as-code, and AI-driven security tooling that lets product engineering teams "shift left" and embeds security across the SDLC, leveraging agentic workflows to triage, review, and scale the reach of a lean security function.
- Design and implement secure-by-default configurations for cloud and Kubernetes infrastructure.
- Own vulnerability management end-to-end, triaging and prioritizing by real risk, driving remediation with engineering teams, and building preventative controls across the software supply chain from development through production.
- Build scalable detection and response systems that catch malicious activity, triage the noise, and run incidents end to end.
- Build deep partnerships with our product engineering and platform teams, helping them deliver secure-by-design solutions.
- You’ll be
- #J-18808-Ljbffr
Staff Security Engineer in Hobart employer: Upguard
At UpGuard, we pride ourselves on being a leading global technology employer, offering a dynamic and collaborative work culture that prioritises employee well-being and growth. With a fully remote working environment, generous benefits including a monthly lifestyle subsidy, extensive learning and development allowances, and stock options, we empower our team to thrive both personally and professionally. Join us in Melbourne as we redefine cyber risk management and enjoy the autonomy to innovate while being part of a company recognised as a Certified Great Place to Work®.