2 months ago
Base Salary
$191k - $264k/yr
Responsibilities
- Define and drive infrastructure security strategy aligned with business priorities, regulatory expectations, and the cloud-native engineering roadmap.
- Own the security roadmap for cloud, platform, compute, and deployment environments across multiple organizations.
- Lead security architecture reviews for infrastructure initiatives involving IAM, Kubernetes, container security, network segmentation, secrets management, CI/CD, and infrastructure-as-code.
- Design preventative controls, guardrails, and automation to reduce systemic infrastructure risk across engineering teams.
- Establish standards for production access, service identity, workload trust, infrastructure hardening, vulnerability management, and secure operations.
- Improve the security of AI-assisted developer workflows and GenAI-enabled systems, including agentic tooling, coding assistants, and internal AI integrations.
- Act as a senior technical authority during high-severity security or production incidents, including root cause analysis and long-term remediation.
- Mentor engineers and influence senior stakeholders through clear risk communication and cross-functional security leadership.
Requirements
- 8+ years of experience in security engineering, infrastructure engineering, software engineering, or a related technical role.
- 4+ years of experience focused on infrastructure, cloud, platform, or production security.
- Experience securing cloud-native infrastructure in AWS or a similar cloud environment.
- Experience across multiple infrastructure security domains, including IAM, Kubernetes or container security, network security, secrets management, infrastructure-as-code, CI/CD security, production access, or vulnerability management.
- Experience writing code or automation in Python, Go, Java, Ruby, or a similar language.
- Experience leading security architecture reviews or technical risk assessments for complex production systems.
- Experience designing preventative security controls, guardrails, or platform-level security solutions used by multiple engineering teams.
- Experience leading cross-functional initiatives with infrastructure, platform, SRE, product engineering, risk, compliance, or audit stakeholders.
- Preferred: 10+ years spanning security, infrastructure, software, or cloud platform engineering.
- Preferred: Experience owning multi-team security roadmaps, Kubernetes security, workload identity, runtime security, cloud-native network controls, cloud security posture management, hardening baselines, drift detection, or infrastructure vulnerability management.
- Preferred: Experience scaling infrastructure security programs with metrics, maturity models, and risk-based prioritization.
- Preferred: Familiarity with security risks in AI-assisted engineering workflows and sensitive data exposure.
- Preferred: Experience partnering with Legal, Risk, Compliance, or Audit teams in regulated environments.
- Preferred: AWS Security Specialty, GCP Professional Cloud Security Engineer, CISSP, CCSP, or equivalent practical expertise.
Benefits
- Remote work within the US or office options in San Mateo, Columbus, or Austin, with East/West Coast time-zone requirements.
- Most teams meet in person once or twice per quarter for 2–4 consecutive days; occasional team onsites are encouraged.
- Target bonuses, annual equity grants vesting quarterly, and an employee stock purchase plan for eligible US employees.
- 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually.
- Medical, dental, vision, wellness resources, supplemental Canadian health coverage, and eligible Health Savings Account contributions.
- Life insurance, disability coverage, paid time off, sick leave, company holidays, and paid family and parental leave.
- Family-centered fertility, parenthood, caregiving, Employee Assistance Program, financial wellness, annual wellness, and annual productivity allowances.
- Team events, company updates, employee resource groups, catered lunches, and stocked micro-kitchens at offices.
Tech Stack
Categories
About Upstart
Upstart builds an AI-powered lending marketplace and cloud software that connect consumers to banks and credit unions for personal, auto, and home-equity credit. Lenders use Upstart’s credit models and applications to automate originations, while Upstart earns platform and referral fees. Founded in 2012 and headquartered in San Mateo, California, Upstart is a public company listed on NASDAQ under the ticker UPST.