Remote Product & Application Security Engineer

Sungrow USA Corporation; United States; Remote; USD 140,000 - 160,000; Full time

Job summary

Sungrow USA Corporation is seeking a Product and Application Security Engineer to drive security across the full product lifecycle, spanning firmware, embedded systems, hardware-integrated applications, cloud services, and connected platforms. The role demands hands-on security expertise and collaboration with engineering teams to remediate vulnerabilities from device to cloud.

You will lead security assessments, embed secure-by-design practices, and guide remediation with cross-functional

Qualifications

• 6–10+ years of experience in product security, embedded security, application security, or IoT security.
• Hands-on experience across multiple stack layers: app, firmware, hardware interfaces, and cloud.
• Strong ability to perform manual code review and system-level threat analysis.
• Experience with security tooling across SAST, DAST, SCA, firmware analysis, and network testing.

Responsibilities

• Perform security assessments across applications, firmware, hardware interfaces, and cloud platforms.
• Conduct code review, firmware analysis, and system-level security testing.
• Identify and validate vulnerabilities across the product attack surface and embed security into SDLC.
• Define and implement secure design patterns across application, device firmware, and communications.

Tools

SAST

DAST

SCA

Firmware analysis

Network testing

Job description

Sungrow USA Corporation is seeking a Product and Application Security Engineer to drive security across the full product lifecycle, spanning firmware, embedded systems, hardware-integrated applications, cloud services, and connected platforms. The role demands hands-on security expertise and collaboration with engineering teams to remediate vulnerabilities from device to cloud.

You will lead security assessments, embed secure-by-design practices, and guide remediation with cross-functional