Principal Application Security Engineer
Upstart is seeking a Principal Application Security Engineer to lead the development and implementation of security strategies that align with the company's AI-driven product roadmap. This role involves collaborating with cross-functional teams to ensure the security of Upstart's products and platforms, contributing to the mission of expanding access to affordable credit through innovative technology.
The Principal Application Security Engineer will be responsible for defining and driving Upstart's application security strategy, conducting security architecture reviews, and establishing a robust threat modeling program for high-risk systems. The role also includes designing application security controls across the software development lifecycle, partnering with infrastructure and cloud teams to enhance security posture, and identifying and mitigating internal and external attack surfaces through automation and platform-level solutions.
Candidates should have a minimum of 9 years of experience in security engineering, with at least 5 years focused on application security. Proficiency in Java, Python, or Ruby development is required, along with experience in designing and implementing application security controls, conducting security architecture reviews, and leading threat modeling for complex, customer-facing systems. Strong leadership skills and the ability to manage multiple significant information security initiatives are essential.
The anticipated base salary for this position ranges from $190,600 to $263,900, depending on geographic location and individual qualifications. Upstart offers a comprehensive benefits package, including competitive compensation, generous 401(k) matching, employee stock purchase plans, medical, dental, and vision coverage, paid time off, and various wellness and professional development allowances.
Upstart fosters a digital-first work environment, providing flexibility for employees to work from locations where they thrive. The company emphasizes intentional in-person connections through team onsites and planning sessions, supporting a culture of collaboration and innovation. With offices in Columbus, Austin, the Bay Area, and an upcoming location in New York City, Upstart offers opportunities for professional growth and development within a mission-driven organization.