Senior Application Security Engineer @Upstart

[Hiring] Senior Application Security Engineer @Upstart

Mar 28, 2025 - Upstart is hiring a remote Senior Application Security Engineer. đź’¸ Salary: $163,300 - $226,400 usd. đź“ŤLocation: USA.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more.

Role Description

We’re looking for a Senior Application Security Engineer to join our growing Information Security team. Your primary function will be to work with Upstart’s engineering and product management teams to ensure that our product platform is secure, safe and reliable.

  • Work closely with our engineering and data science teams to securely design and implement new products and features, including the development and maintenance of threat models for high-risk functionality.
  • Set up a regular vulnerability scanning tools and manage remediation of identified issues.
  • Support teams with vulnerability remediation efforts, including the design of remediation strategies.
  • Assess the threat model for cloud native infrastructures and applications.
  • Identify and design company-wide security controls and solutions.
  • Operate as an integral member of the engineering team and advocate for security best practices across the organization.
  • Help identify Upstart’s internal and external attack surface in a dynamic environment.

Qualifications

  • 3+ years of experience in an application security or security engineering-focused role.
  • An IT/CS degree or equivalent knowledge.
  • Experience in Java, Python or Ruby development.
  • Knowledge of industry standard authentication and authorization protocols (TLS, SAML, etc).
  • Previous usage or knowledge of SAST/DAST and vulnerability scanners.
  • Understanding of Full Stack Development, SDLC, and CI/CD pipelines.
  • Understanding of network stack and common protocols.
  • A self-starter who is comfortable getting hands-on and engaging in all areas of product security, from ideation to deployment.
  • Ability to collaborate cross-functionally and communicate effectively with highly technical teams.

Requirements

  • 7+ years of experience in a high-security environment (preferred).
  • MS degree or equivalent knowledge (preferred).
  • Certification in IT or cybersecurity (e.g. OSCP, OSCE, OSWE) (preferred).
  • Experience conducting product/application level security audits, penetration tests, and security focused code reviews (preferred).
  • AWS, K8s and CI/CD pipeline experience (preferred).
  • Contributions to the security industry (e.g. whitepaper, security advisories, OSS projects, patents) (preferred).

Benefits

  • Competitive Compensation (base + bonus & equity).
  • Comprehensive medical, dental, and vision coverage with Health Savings Account contributions from Upstart.
  • 401(k) with 100% company match up to $4,500 and immediate vesting and after-tax savings.
  • Employee Stock Purchase Plan (ESPP).
  • Life and disability insurance.
  • Generous holiday, vacation, sick and safety leave.
  • Supportive parental, family care, and military leave programs.
  • Annual wellness, technology & ergonomic reimbursement programs.
  • Social activities including team events and on-sites, all-company updates, employee resource groups (ERGs), and other interest groups such as book clubs, fitness, investing, and volunteering.
  • Catered lunches + snacks & drinks when working in offices.

Similar Remote Jobs

More jobs at Upstart

More Software Development jobs

More jobs in USA

Before You Apply
️
đź“Ť Be aware of the location restriction for this remote position: USA
‼ Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more.
Senior Application Security Engineer @Upstart
Software Development
Salary đź’¸ $163,300 - $226,400 usd
Remote Location
USA
Job Type full-time
Posted Mar 28, 2025
Apply for this position Unlock 54,269 Remote Jobs
️
đź“Ť Be aware of the location restriction for this remote position: USA
‼ Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more.
Senior Application Security Engineer Apply for this position Unlock 54,269 Remote Jobs
Ă—
  • Unlock 54,269 hidden remote jobs.
  • Your shortcut to remote work. Apply before everyone else.
  • Click and apply. No middlemen, no hassle.

We’re not like the other sites. Come see why!

50% off in April 2025
  • Single payment
  • Lifetime access
  • Filter by location/skills/salary…
  • Create custom email alerts
  • Private Slack Community