Staff Product Security Engineer at UpGuard

Department: Product

Setup: Remote
Location: Sydney, New South Wales
Type: Full-time
Level: staff+
Posted: Sep 9, 2026

Description

UpGuard is hiring a Staff Product Security Engineer to build and scale its product security function across product and production environments. The role owns threat modelling, security reviews, vulnerability management, secure cloud and Kubernetes configurations, AI-driven security tooling, detection and response, and secure SDLC practices. It is a fully remote Staff-level individual contributor role with optional offices in Sydney and Hobart, and requires 7+ years of security, software, or security operations experience, cloud and Kubernetes expertise, and hands-on infrastructure-as-code experience.

Required Skills

Cloud security
Kubernetes
IAM
Threat modelling
Terraform
Policy-as-code
Go

Additional Information

Required Previous Experiences: 7+ years of security engineering, software engineering, or security operations experience in cloud environments
Cloud security experience
Cloud-native Kubernetes and container security experience
IAM and cloud identity security experience
Experience leading technical security reviews and threat modelling
Web application vulnerability prevention experience
Hands-on infrastructure-as-code experience
Preferred Qualifications: Experience as a founding security hire or founding member of a security function
AI/LLM security experience
Backend engineering skills in Go
SOC 2 or ISO 27001 audit experience
Public security research or CVE experience
Offensive security and exploitation skills

About UpGuard

UpGuard

cybersecurity and risk managementLevel 9, 45 Murray Street Hobart TAS 7000 Australia250

Founded in 2012, UpGuard provides an AI-powered platform for Cyber Risk Posture Management, giving organizations a centralized, actionable view of cyber risk across their vendors, attack surface, and workforce. Its products help companies assess, measure, and reduce cybersecurity risks, including through vendor risk management, attack surface monitoring, and human risk management. UpGuard says it is venture-backed and profitable, has thousands of customers around the world, and is operating at scale while remaining nimble.