Note: The job is a remote job and is open to candidates in USA. Uplight is creating a new category of energy, making software that manages energy resources to generate, shift, or save energy. They are seeking a Senior Product Security Engineer to support and improve their Secure Software Development Lifecycle and ensure robust security practices across their products.

Responsibilities

• Support, implement, and improve Secure Software Development Lifecycle (SDLC)
• Act as a consultant to the design and development stages of SDLC
• Document and work with product and engineering teams to implement security best practices and system configuration standards
• Support Asset Management initiatives to ensure all assets are tagged and classified
• Work with outside parties to perform penetration tests
• Perform Security Architecture, AppSec and Risk Assessments
• Perform Threat Modelling
• Analyze, manage, and work with other teams to address vulnerabilities, code weaknesses, misconfigurations, and non-compliance findings
• Coordinate and participate in Disaster Recovery exercises, including Backup tests
• Maintain and administer security tooling
• Lead security projects dedicated to improving Uplights's security posture
• Respond to and assist with incidents as needed or assigned
• Implement and be responsible for best product security practices and procedures
• Perform an on-call shift rotation
• Demonstrate effective communication skills, both verbal and written

Skills

• Advanced experience in securing applications and application settings
• Advanced experience in app and product security
• Advanced understanding in securing cloud technologies
• Experience with technologies from at least one public cloud (AWS, GCP, Azure)
• Experience in securing containerization (Docker, K8s, etc) and API
• Experience with modern DevSecOps practices including implementing automated security in IaC and CI/CD pipelines
• Strong scripting skills Python/Shell Scripting experience
• Mid to advanced level Linux knowledge in a physical, virtual, or public cloud environment
• Exceptional verbal and written communication skills are necessary to effectively collaborate with peers, and to present and explain highly technical information to stakeholders who may have limited technical knowledge
• CISSP, CASP+, GSLC, CISM certified

Benefits

• Flexible time off
• Generous parental leave
• A wellness stipend
• Work flexibility

Company Overview

Company H1B Sponsorship