1 day ago
Base Salary
$191k - $264k/yr
Responsibilities
- Define and drive infrastructure security strategy aligned with business priorities, regulatory expectations, and the cloud-native engineering roadmap.
- Own the security roadmap for cloud, platform, compute, and deployment environments across multiple organizations.
- Lead security architecture reviews for infrastructure initiatives involving IAM, Kubernetes, container security, network segmentation, secrets management, CI/CD, and infrastructure-as-code.
- Design preventative controls, guardrails, and automation to reduce systemic infrastructure risk across engineering teams.
- Establish standards for production access, service identity, workload trust, infrastructure hardening, vulnerability management, and secure operations.
- Improve the security of AI-assisted developer workflows and GenAI-enabled systems, including agentic tooling, coding assistants, and internal AI integrations.
- Act as a senior technical authority during high-severity security or production incidents, including root cause analysis and long-term remediation.
- Mentor engineers and influence senior stakeholders through clear risk communication and cross-functional security leadership.
Requirements
- 8+ years of experience in security engineering, infrastructure engineering, software engineering, or a related technical role.
- 4+ years of experience focused on infrastructure, cloud, platform, or production security.
- Experience securing cloud-native infrastructure in AWS or a similar cloud environment.
- Experience across multiple infrastructure security domains, including IAM, Kubernetes or container security, network security, secrets management, infrastructure-as-code, CI/CD security, production access, or vulnerability management.
- Experience writing code or automation in Python, Go, Java, Ruby, or a similar language.
- Experience leading security architecture reviews or technical risk assessments for complex production systems.
- Experience designing preventative security controls, guardrails, or platform-level security solutions used by multiple engineering teams.
- Experience leading cross-functional initiatives with infrastructure, platform, SRE, product engineering, risk, compliance, or audit stakeholders.
- Preferred: 10+ years spanning security, infrastructure, software, or cloud platform engineering.
- Preferred: Experience owning multi-team security roadmaps, Kubernetes security, workload identity, runtime security, cloud-native network controls, cloud security posture management, hardening baselines, drift detection, or infrastructure vulnerability management.
- Preferred: Experience scaling infrastructure security programs with metrics, maturity models, and risk-based prioritization.
- Preferred: Familiarity with security risks in AI-assisted engineering workflows and sensitive data exposure.
- Preferred: Experience partnering with Legal, Risk, Compliance, or Audit teams in regulated environments.
- Preferred: AWS Security Specialty, GCP Professional Cloud Security Engineer, CISSP, CCSP, or equivalent practical expertise.
Benefits
- Remote work within the US or office options in San Mateo, Columbus, or Austin, with East/West Coast time-zone requirements.
- Most teams meet in person once or twice per quarter for 2–4 consecutive days; occasional team onsites are encouraged.
- Target bonuses, annual equity grants vesting quarterly, and an employee stock purchase plan for eligible US employees.
- 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually.
- Medical, dental, vision, wellness resources, supplemental Canadian health coverage, and eligible Health Savings Account contributions.
- Life insurance, disability coverage, paid time off, sick leave, company holidays, and paid family and parental leave.
- Family-centered fertility, parenthood, caregiving, Employee Assistance Program, financial wellness, annual wellness, and annual productivity allowances.
- Team events, company updates, employee resource groups, catered lunches, and stocked micro-kitchens at offices.
Tech Stack
Categories
About Upstart
Upstart (NASDAQ: UPST) is the leading AI lending marketplace, connecting millions of consumers to more than 100 banks and credit unions that leverage Upstart’s AI models and cloud applications to deliver superior credit products. With Upstart AI, lenders can approve more borrowers at lower rates while delivering the exceptional digital-first experience customers demand. More than 90% of loans are fully automated, with no human intervention by Upstart. Founded in 2012, Upstart’s platform includes personal loans, automotive retail and refinance loans, home equity lines of credit, and small-dollar “relief” loans. Upstart is based in San Mateo, California. Upstart Network, Inc. NMLS #936133 | All mortgage lending conducted by Upstart Mortgage, LLC. NMLS #2443873 nmlsconsumeraccess.org