SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Base is a next-generation power company deploying a distributed battery network to transform the electrical grid. The company's batteries are internet-connected industrial control systems installed across thousands of homes, operating collectively as a distributed power plant with a complex attack surface spanning silicon to cloud.
In this role, you will own end-to-end security of the fleet and its interactions with external systems. The fleet is live today and scaling rapidly, making security exposure real and compounding with each installation. This is a generalist position requiring you to move fluidly across software, firmware, hardware, and cloud infrastructure to address the highest-risk vulnerabilities.
Key responsibilities include:
- Conducting threat modeling and design reviews across the entire product stack, from gateway SoCs and boot chains through embedded firmware, fleet transport, command authority, and cloud services
- Converting threat models into prioritized security objectives and driving their implementation across teams
- Designing and building security foundations: device identity, factory provisioning, code and OTA signing, service authentication, and certificate lifecycle management for long-lived devices
- Analyzing vulnerability reports and internal findings through reproduction, variant analysis, exploitability assessment, and impact determination
- Performing adversarial testing across all system layers and translating findings into requirements and standards
- Authoring security engineering standards and reference patterns; building tooling for repeatable review and enforcement
- Producing technical security assessments for utility, interconnection, and certification engagements
The Product Security team is intentionally small and generalist, moving fluidly across firmware, hardware, software, and cloud rather than specializing narrowly. The team addresses both establishing the current security state of the live fleet and building lasting foundations to support safe scaling.
Base operates with a startup pace and culture emphasizing first-principles thinking, direct feedback, ownership, and mission commitment. Work is in-person and intensive.
Requirements:
- Proven experience securing production systems spanning multiple trust boundaries
- Track record of shipping security work end-to-end and collaborating across teams to ensure adoption
- Strong judgment distinguishing plausible attacks from consequential ones and prioritizing accordingly
- Ability to rapidly become productive in unfamiliar systems, validate assumptions with evidence, and support conclusions rigorously
- Sufficient software engineering depth to read, test, and modify systems under review regardless of language or tech stack
- Clear communication and writing skills with ability to align cross-functional teams
