<p>At Uplight, we are motivating energy users and providers to accelerate the clean energy ecosystem. Working with over 75 of the world&rsquo;s leading electric and gas utilities, Uplight provides end-to-end customer energy experience. Uplight delivers personalized experiences that customers have now come to expect&ndash;improving satisfaction, increasing revenue, reducing the cost to serve, and contributing to carbon reduction goals. We are in the process of obtaining our B Corp certification,&nbsp; enabling us to put our values into action by not only making decisions for the benefit of our shareholders, but also for our customers, environment, employees, and community.</p>

Senior Product Security Engineer

<div><span>Uplight is </span><span>creating a new category of energy</span><span>. We make software that manages energy resources in homes and businesses—including things like smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and even people’s behavior—to generate, shift, or save energy to balance the grid, making it more efficient and reliable. This creates clean energy capacity that can be used by the power grid instead of burning more fossil fuels. Our solutions accelerate the transition to clean energy and save money for energy customers.  </span></div><div><span>We are seeking a </span><span>Senior Product Security Engineer</span><span> to join our team and help us achieve our ambitious goals for our business and the planet.</span></div><div><span>How you will make an impact:</span></div><ul><li><div><span>Support, implement, and improve Secure Software Development Lifecycle (SDLC).</span></div></li><li><div><span>Act as a consultant to the design and development stages of SDLC.</span></div></li><li><div><span>Document and work with product and engineering teams to implement security best practices and system configuration standards. </span></div></li><li><div><span>Support Asset Management initiatives to ensure all assets are tagged and classified.</span></div></li><li><div><span>Work with outside parties to perform penetration tests.</span></div></li><li><div><span>Perform Security Architecture, AppSec and Risk Assessments.</span></div></li><li><div><span>Perform Threat Modelling.</span></div></li><li><div><span>Analyze, manage, and work with other teams to address vulnerabilities, code weaknesses, misconfigurations, and non-compliance findings.</span></div></li><li><div><span>Coordinate and participate in Disaster Recovery exercises, including Backup tests.</span></div></li><li><div><span>Maintain and administer security tooling.</span></div></li><li><div><span>Lead security projects dedicated to improving Uplights's security posture. </span></div></li><li><div><span>Respond to and assist with incidents as needed or assigned. </span></div></li><li><div><span>Implement and be responsible for best product security practices and procedures.</span></div></li><li><div><span>Perform an on-call shift rotation.</span></div></li><li><div><span>Demonstrate effective communication skills, both verbal and written.</span></div></li></ul><div><span>Skills and experience are necessary, but we hire on value alignment first, so if you feel you would be a good fit with us, still consider applying.</span></div><div><span>What you bring to Uplight:</span></div><ul><li><div><span>Advanced experience in securing applications and application settings</span></div></li><li><div><span>Advanced experience in app and product security</span></div></li><li><div><span>Advanced understanding in securing cloud technologies</span></div></li><li><div><span>Experience with technologies from at least one public cloud (AWS, GCP, Azure)</span></div></li><li><div><span>Experience in securing containerization (Docker, K8s, etc) and API</span></div></li><li><div><span>Experience with modern DevSecOps practices including implementing automated security in IaC and CI/CD pipelines</span></div></li><li><div><span>Strong scripting skills Python/Shell Scripting experience</span></div></li><li><div><span>Mid to advanced level Linux knowledge in a physical, virtual, or public cloud environment.</span></div></li><li><div><span>Exceptional verbal and written communication skills are necessary to effectively collaborate with peers, and to present and explain highly technical information to stakeholders who may have limited technical knowledge.</span></div></li></ul><div><span>Bonus Points:</span></div><ul><li><div><span>CISSP, CASP+, GSLC, CISM certified.</span></div></li></ul><div></div><div><span>Don’t meet every single requirement? Studies have shown that women, marginalized genders and people of color are less likely to apply to jobs unless they meet every single qualification. At Uplight we are dedicated to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles</span><span>      </span></div><div><span>      </span></div><div><span>Why Join Uplight in Leading the Fight Against Climate Change?</span></div><div><span>At Uplight, we're not just offering a job – we're offering a chance to be part of the solution to one of the world's biggest challenges. As a certified B Corporation, we're deeply committed to both social and environmental responsibility. Here's why you should join our team of passionate Uplighters:</span></div><ul><li><div><span>Make a Meaningful Impact:</span><span> Your work directly impacts our mission of decarbonization and building a more sustainable future.</span></div></li><li><div><span>Grow Your Career: </span><span>We offer ample advancement opportunities, robust learning and development programs, and a supportive team environment that fosters collaboration and innovation.</span></div></li><li><div><span>Thrive:  </span><span>We offer comprehensive benefits, including flexible time off, generous parental leave, a wellness stipend, and work flexibility to help you thrive both personally and professionally.</span></div></li><li><div><span>Belong to an Inclusive Community:</span><span> We celebrate diversity and foster an inclusive workplace where everyone feels respected, empowered, and heard. Our Employee Resource Groups offer opportunities to connect with colleagues who share your interests and backgrounds.</span></div></li><li><div><span>Be Part of a Growing Movement:</span><span> Join a team of dedicated individuals who are passionate about creating a more sustainable future. We offer a collaborative environment where your ideas are valued and your contributions</span></div></li></ul><div><span>Salary Range</span><span>: $140,000 to $165,000 + bonus</span></div><div><span>      </span></div><div><span>In accordance with the Colorado Equal Pay for Equal Work Act, the approximate annual base compensation range is listed above. The actual offer, reflecting the total compensation package and benefits, will be determined by a number of factors including the applicant's experience, knowledge, skills, and abilities, as well as internal equity among our team.</span><span>      </span></div><div><span>      </span></div><div><span>Uplight provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type without regard to race (including hair texture and hairstyles), color, religion (including head coverings), age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.</span><span> </span></div>

Senior Product Security Engineer

About the Job

About the Company

Uplight

Similar Jobs

Principal, Security Engineer SOC

Principal, Security Engineer SOC

Principal, Security Engineer

Principal, Security Engineer

Senior Security Engineer

Senior Security Engineer

Lead Application Security Engineer

Lead Application Security Engineer

Security Engineer

Security Engineer

Staff SecOps Engineer

Staff SecOps Engineer

Application Security Engineer

Application Security Engineer

Security Engineer, Principal Member of Technical Staff

Security Engineer, Principal Member of Technical Staff

Engineer V, Cyber DevSecOps

Engineer V, Cyber DevSecOps

Vice President, Information Security

Vice President, Information Security