Product & Application Security Engineer — Remote

Sungrow Na; Idaho; Hybrid; USD 140,000 - 160,000; Full time

Job summary

Sungrow Americas seeks a Product & Application Security Engineer to execute security across firmware, embedded systems, hardware-integrated apps, cloud services, and connected platforms. You will protect the full product lifecycle from device to cloud and work with engineering to remediate vulnerabilities.

This high-depth, cross-domain role requires moving between code, devices, protocols, and cloud architectures with a hands-on security focus.

Qualifications

• 6–10+ years of experience in product security, embedded security, application security, or IoT security.
• Hands-on across multiple stack layers including applications, firmware, device communications, and cloud services.
• Experience with security tooling across SAST, DAST, SCA, firmware analysis, and network testing.
• Working knowledge of modern architectures (cloud, microservices, device-cloud integration).
• Ability to leverage AI to improve security engineering outcomes and automation.

Responsibilities

• Perform security assessments across applications, firmware, hardware interfaces, and cloud platforms.
• Conduct code review, firmware analysis, and system-level security testing.
• Identify and validate vulnerabilities across the product attack surface.
• Embed security into SDLC across software, firmware, and device-integrated systems.
• Define and implement secure design patterns across applications, firmware, and protocols.
• Partner with engineering to ensure secure-by-design architecture decisions.
• Perform penetration testing and device-level assessments.
• Validate findings from internal testing, third-party assessments, and teardowns.
• Triage and remediation guidance across software, firmware, and hardware layers.
• Support SBOM/HBOM analysis and supply chain security.
• Evaluate security risks in IoT, cloud-native systems, and AI-enabled workflows.
• Translate findings into practical engineering fixes and real-time guidance.

Skills

Product security

Embedded security

Application security

IoT security

Threat modeling

Manual code review

Security testing

AI/Automation

Tools

SAST

DAST

SCA

Firmware analysis

Network testing

Job description

Sungrow Americas seeks a Product & Application Security Engineer to execute security across firmware, embedded systems, hardware-integrated apps, cloud services, and connected platforms. You will protect the full product lifecycle from device to cloud and work with engineering to remediate vulnerabilities.

This high-depth, cross-domain role requires moving between code, devices, protocols, and cloud architectures with a hands-on security focus.