Senior Security Engineer

The PositionDo you dream about creating a more sustainable future? At Uplight, we are motivating energy users and providers to accelerate the clean energy ecosystem. Working with over 80 of the world’s leading electric and gas utilities, Uplight provides an end-to-end customer energy experience. Uplight delivers personalized experiences that customers have now come to expect–improving satisfaction, increasing revenue, reducing the cost to serve, and contributing to carbon reduction goals. We are B Corp certified,  enabling us to put our values into action by not only making decisions for the benefit of our shareholders, but also for our customers, environment, employees, and community.We are seeking a Senior Security Engineer to join our team and help us achieve our ambitious goals for our business and the planet.What you get to do:

• With more than 7+ years of Total industry experience
•  Support, implement, and improve Secure Software Development Lifecycle (SDLC).
• Act as a consultant to the design and development stages of SDLC.
• Document and work with product and engineering teams to implement security best practices and system configuration standards. 
• Perform Security Architecture, AppSec and Risk Assessments.
• Perform Threat Modelling.
• Analyze, manage, and work with other teams to address vulnerabilities, code weaknesses, misconfigurations, and non-compliance findings.
• Maintain and administer security tooling.
• Lead security projects dedicated to improving Uplights's security posture. 
• Respond to and assist with incidents as needed or assigned. 
• Perform an on-call shift rotation.
• Demonstrate effective communication skills, both verbal and written.

Skills and experience are necessary, but we hire on value alignment first, so if you feel you would be a good fit with us, still consider applying.What you bring to Uplight:

• Advanced experience in securing applications and application settings
• Advanced experience in app and product security
• Advanced understanding in securing cloud technologies
• Experience with technologies from at least one public cloud (AWS, GCP, Azure)
• Experience in securing containerization (Docker, K8s, etc) and API
• Experience with modern DevSecOps practices including implementing automated security in IaC and CI/CD pipelines
• Strong scripting skills Python/Shell Scripting experience
• Mid to advanced level Linux knowledge in a physical, virtual, or public cloud environment.
• Exceptional verbal and written communication skills are necessary to effectively collaborate with peers, and to present and explain highly technical information to stakeholders who may have limited technical knowledge.

Bonus Points:

• CISSP, CASP+, GSLC, CISM certified.

 

Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field.

Uplight provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type without regard to race (including hair texture and hairstyles), color, religion (including head coverings), age, sex, national origin, caste, disability status, genetics, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.