Staff Engineer, Application Security - Everyday Electric

Who We Are

Everyday Electric (formerly Renew Home) is on a mission to change how we power the world by making it easier for customers to save energy and money at home as part of the largest residential virtual power plant in North America.

We partner with industry-leading brands to better manage residential energy for users by prioritizing efficiency, savings, and comfort — and cleaner energy for everyone.

We are an Equal Opportunity employer striving to create a diverse, equitable, and inclusive work environment where everyone feels that they have a voice that is heard.

Learn more about our work at www.everydayelectric.com.

What You Will Do

• Security strategy and leadership: Help define and drive company-wide security strategy across applications, cloud infrastructure, and AI systems. Identify our highest-impact risks and lead cross-functional initiatives to address them.
• Application and product security: Lead security architecture reviews, threat modeling, code reviews, and security testing. Partner with engineering teams to build security into the SDLC and eliminate classes of vulnerabilities through secure-by-default patterns and guardrails.
• AI and agentic security: Define and implement security guardrails for LLM-powered applications, AI agents, coding assistants, and MCP/tool integrations, including identity, permissions, data access, secrets, sandboxing, and human approval boundaries.
• Cloud and infrastructure security: Improve security across AWS/GCP, containers, CI/CD, identity and access management, and the software supply chain through scalable controls and automation.
• Vulnerability management and incident response: Improve how we discover, prioritize, remediate, and detect security issues, and provide technical leadership during significant security incidents.
• Company-wide security: Partner with Engineering, Infrastructure, IT, Legal, and other teams on security architecture, policies, compliance programs, and emerging risks.
• Security culture: Raise the security capabilities of the engineering organization through tooling, training, security champions, technical guidance, and mentorship.

Requirements

• 7+ years of experience in application, product, cloud, or infrastructure security, with strong hands-on security engineering experience.
• Strong software engineering skills with the ability to read, write, and review production code and design practical security improvements.
• Deep understanding of application and API security, authentication and authorization, cloud security, and modern software development and delivery.
• Experience designing scalable security architecture and secure-by-default controls across applications and cloud infrastructure.
• Understanding of AI and agentic security risks, including prompt injection, insecure tool use, excessive permissions, sensitive-data leakage, and risks associated with MCP and third-party AI integrations.
• Proficiency in utilizing AWS security services (e.g. IAM, WAF, GuardDuty, AWS Inspector) and static and dynamic application security tools like CodeQL, Burp Suite, Zap, Nuclei.
• Strong understanding of networking, security, and core Internet protocols (e.g. TCP/IP, DNS, SMTP, SSL, distributed networks).
• Demonstrated ability to lead complex security initiatives across multiple teams, influence technical direction, and operate independently in ambiguous problem spaces.
• Strong communication skills and the ability to translate security risks into practical engineering decisions.
• Experience with AWS security services, application security tooling, SOC 2/ISO 27001, and AI-assisted security tools is a plus.

If this work excites you and you have strong experience in most of these areas, we’d love to hear from you even if you don't check every box.

What You'll Get

• Compensation: Base salary of $170,000 - $220,000 based on experience and location, plus target annual bonus of 15% and participation in long-term incentive programs tied to company growth.
• Remote Setup: Fully remote work environment with a home office set-up allowance.
• Work-Life Balance: Unlimited PTO with a top-down culture of taking meaningful vacation, parental leave benefits, and a corporate commitment to sustainable work practices.
• Health & Wellness: Comprehensive medical, dental, and vision health and wellness coverage.
• Retirement: 401(k) plan with employer matching contributions.
• Culture: Collaborative remote-first environment alongside passionate team members.

Work Authorization & Equal Opportunity

• Visa Sponsorship: Everyday Electric is unable to sponsor or take over sponsorship of employment visas at this time. Candidates must be authorized to work in the United States without current or future visa sponsorship required.
• EEO Statement: Individuals seeking employment at Everyday Electric are considered without regard to race, color, religious creed, sex, gender identification, national origin, citizenship status, age, physical or mental disability, sexual orientation, marital, parental, veteran or military status, or any other status protected by applicable law.
• Accommodations: Reasonable accommodations are available for applicants with disabilities upon request.