SecOps Engineer

About Upstart

At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence.

As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers.

We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada.

The Team

Upstart’s Security Operations team is passionate in bringing progressive approaches in securing our products. We believe that security should empower innovation, move at the speed of business, and have safety by design as core principles. Our team’s mission is to ensure the safety of our core product platforms, enterprise, and manage threats to Upstart.

As a SecOps Engineer at Upstart, you will build automated response mechanisms, triage and respond to critical alerts, hunt for threats in the environment, and help build our security data lake. You’ll share in the team’s responsibility for monitoring and actively defending our corporate and product infrastructure.

How you’ll make an impact

• Work closely with system owners to ingest new log feeds for security monitoring
• Enhance and maintain our Detection and Response platforms
• Build in workflows with AI analysis to automatically investigate and triage issues
• Be on the frontlines of Incident Response, actively investigating issues and protecting Upstart
• Build common response workflows to expedite investigation and response using AI and SOAR Technology

Minimum Qualifications

• Assume breach mindset, chasing down all threads to completion
• Strong Log-fu (ability to build robust log search queries)
• Intermediate proficiency in at least one programming language (preferably Python)
• Strong Git experience (rebasing doesn't scare you!)

Preferred Qualifications

• AWS Experience & Infra as Code management of resources
• OSX Endpoint Investigation Experience
• Internal Application Development Experience
• SaaS Application security experience
• Experience in a high-security environment
• Experience with managing Threat Intelligence