Product Security Engineer

Base Power Company • Austin, TX

2d • Onsite

About The Position

Base is an electricity and energy-storage company deploying a network of distributed batteries. Its batteries are internet-connected industrial control systems installed in homes and collectively operated as a distributed power plant. The Product Security Engineer owns end-to-end security across the fleet and its interactions with the world, spanning software, firmware, hardware, and cloud. The fleet is already live and scaling quickly, making security exposure a current and growing concern.

The role is part of a small, deliberately generalist Product Security team responsible for establishing the fleet’s security posture and building durable security foundations as the product scales. The team works across device silicon and boot chains, firmware, fleet communications, command authority, and cloud services. The position may expand or change as startup priorities evolve.

Requirements

• Experience securing production systems that span multiple trust boundaries.
• A track record of shipping security work end-to-end and collaborating across teams to ensure it is adopted.
• Judgment to distinguish plausible attacks from consequential ones and prioritize accordingly.
• Ability to become productive quickly in unfamiliar systems, examine assumptions, and support conclusions with evidence.
• Software engineering depth sufficient to read, test, and change reviewed systems regardless of language or technology stack.
• Clear communication and writing skills, including the ability to rally other teams.

Responsibilities

• Own threat modeling and design reviews across the product, from gateway SoCs and boot chains through embedded firmware, fleet transport, command authority, and cloud services.
• Translate threat models into prioritized security objectives and drive their implementation.
• Design and build fleet security foundations, including device identity and factory provisioning, code and OTA signing, service authentication, and certificate lifecycle management.
• Analyze vulnerability reports and internal findings by reproducing issues, conducting variant analysis, determining exploitability and design impact, and directing fixes.
• Test the product from an attacker’s perspective at the relevant layers, then convert findings into requirements and standards changes.
• Author security engineering standards and reference patterns, and build tooling to make review and enforcement repeatable.
• Produce technical assessments supporting Base’s positions in utility, interconnection, and certification engagements where device security is in scope.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed