Staff Product Security Engineer: AI-Driven, Secure-by-Default

UpGuard; City of Brisbane; On-site; AUD 170,000 - 210,000; Full time

Benefits offered by this job

WFH set-up allowance

Lifestyle subsidy

Learning & Development allowance

Annual leave

Parental Leave

Fully remote working

Top-spec hardware

Generative AI subsidy

Stock options

Job summary

UpGuard is seeking a Staff-level Product Security Engineer to shape the security direction for its products and cloud infrastructure. You’ll own threat modelling, reviews, and the security roadmap, collaborating with product engineering to secure CI/CD pipelines and production systems.

You will lead the security function from the ground up, with executive backing, and build scalable detection, response capabilities, and secure-by-design practices as UpGuard continues to scale globally.

Qualifications

• Experience leading security reviews of products and architectures.
• Hands-on with threat modelling and risk mitigation.
• Experience securing cloud-native infrastructure (GCP/AWS/Azure).

Responsibilities

• Lead threat modelling and security reviews across UpGuard's product portfolio and cloud infrastructure, proactively surfacing attack vectors and designing mitigation strategies that scale with growth.
• Build automation, policy-as-code, and AI-driven security tooling that lets product engineering teams shift left and embeds security across the SDLC, leveraging agentic workflows to triage, review, and scale the reach of a lean security function.
• Design and implement secure-by-default configurations for cloud and Kubernetes infrastructure.
• Own vulnerability management end-to-end, triaging and prioritizing by real risk, driving remediation with engineering teams, and building preventative controls across the software supply chain from development through production.
• Build scalable detection and response systems that catch malicious activity, triage the noise, and run incidents end to end.
• Build deep partnerships with our product engineering and platform teams, helping them deliver secure-by-design solutions.

Skills

Threat modelling

Cloud security

Kubernetes security

IAM security

Security reviews

Go programming

Incident response

Tools

Terraform/OpenTofu

Job description

UpGuard is seeking a Staff-level Product Security Engineer to shape the security direction for its products and cloud infrastructure. You’ll own threat modelling, reviews, and the security roadmap, collaborating with product engineering to secure CI/CD pipelines and production systems.

You will lead the security function from the ground up, with executive backing, and build scalable detection, response capabilities, and secure-by-design practices as UpGuard continues to scale globally.