Infrastructure Security Engineer

Role Overview

As an Infrastructure Security Engineer (Security Engineer II) at Upstart, you will help design, build, and improve security controls that protect production infrastructure and developer platforms. You’ll partner with infrastructure, platform, product, and SRE teams to identify risks, automate preventative controls, and improve secure-by-default patterns.

Responsibilities

• Design & implement security controls across cloud, platform, and deployment systems, emphasizing secure defaults and durable risk reduction.
• Review architectures and infrastructure changes with platform/SRE/infrastructure teams; identify security risks and drive remediation plans.
• Build and improve automation for infrastructure security, including:
  • Cloud IAM
  • Kubernetes and container security
  • Secrets handling
  • Infrastructure-as-code workflows
• Detect and remediate systemic weaknesses such as:
  • Misconfigurations
  • Exposed services
  • Weak trust boundaries
  • Insecure production defaults
• Support production vulnerability management by prioritizing findings, validating fixes, and improving detection/prevention over time.
• Improve security for AI-assisted developer workflows and GenAI-enabled systems, including agentic tooling, coding assistants, and internal AI integrations that interact with production or sensitive environments.
• Respond to production security issues, investigate root causes using logs/dashboards/system context, and follow up with platform-strengthening improvements.

Requirements / Expectations

• Ability to independently lead medium-sized projects.
• Ability to troubleshoot moderately complex security problems.
• Deliver durable improvements that make Upstart’s infrastructure more secure by default.