Jobs and Careers
UP
Senior Product Security Engineer
UplightUnited States, United Statesfull_timeVerifiedPosted 2 Mar 2026
💰 $165,000/yr($140,000/yr – $165,000/yr)
About the role
Uplight is creating a new category of energy. We make software that manages energy resources in homes and businesses—including things like smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and even people’s behavior—to generate, shift, or save energy to balance the grid, making it more efficient and reliable. This creates clean energy capacity that can be used by the power grid instead of burning more fossil fuels. Our solutions accelerate the transition to clean energy and save money for energy customers. We are seeking a Senior Product Security Engineer to join our team and help us achieve our ambitious goals for our business and the planet.How you will make an impact:
- Support, implement, and improve Secure Software Development Lifecycle (SDLC).
- Act as a consultant to the design and development stages of SDLC.
- Document and work with product and engineering teams to implement security best practices and system configuration standards.
- Support Asset Management initiatives to ensure all assets are tagged and classified.
- Work with outside parties to perform penetration tests.
- Perform Security Architecture, AppSec and Risk Assessments.
- Perform Threat Modelling.
- Analyze, manage, and work with other teams to address vulnerabilities, code weaknesses, misconfigurations, and non-compliance findings.
- Coordinate and participate in Disaster Recovery exercises, including Backup tests.
- Maintain and administer security tooling.
- Lead security projects dedicated to improving Uplights's security posture.
- Respond to and assist with incidents as needed or assigned.
- Implement and be responsible for best product security practices and procedures.
- Perform an on-call shift rotation.
- Demonstrate effective communication skills, both verbal and written.
- Advanced experience in securing applications and application settings
- Advanced experience in app and product security
- Advanced understanding in securing cloud technologies
- Experience with technologies from at least one public cloud (AWS, GCP, Azure)
- Experience in securing containerization (Docker, K8s, etc) and API
- Experience with modern DevSecOps practices including implementing automated security in IaC and CI/CD pipelines
- Strong scripting skills Python/Shell Scripting experience
- Mid to advanced level Linux knowledge in a physical, virtual, or public cloud environment.
- Exceptional verbal and written communication skills are necessary to effectively collaborate with peers, and to present and explain highly technical information to stakeholders who may have limited technical knowledge.
- CISSP, CASP+, GSLC, CISM certified.
- Make a Meaningful Impact: Your work directly impacts our mission of decarbonization and building a more sustainable future.
- Grow Your Career: We offer ample advancement opportunities, robust learning and development programs, and a supportive team environment that fosters collaboration and innovation.
- Thrive: We offer comprehensive benefits, including flexible time off, generous parental leave, a wellness stipend, and work flexibility to help you thrive both person
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s