About the role

Role overview

Join Upstart’s Information Security team as a Senior Security Engineer (Data Security). You will define, build, and lead Upstart’s data security program, architecting and shipping software solutions that improve data protection and governance.

Responsibilities

Lead the technical design and execution of Upstart’s data security program (from early foundations to mature, scalable systems)
Architect and build security software such as APIs, services, and internal tools for data protection and governance
Drive adoption of least-privilege access models and modern data protection patterns across the organization
Partner with cross-functional stakeholders and influence both technical and non-technical leaders
Mentor engineers and security practitioners and continuously improve security systems
Take complex security controls from concept to reality and enable 0→1 security capability launches

Requirements

Senior security practitioner with a strong software engineering background; able to design and build production-quality systems (APIs/services/internal web apps)
Extensive experience in enterprise/operational security with deep focus on Data Security and Identity & Access Management (IAM)
Experience applying least-privilege principles at scale
5+ years of experience (Bachelor’s degree or equivalent)
Strong communication and stakeholder influence skills
Ability to navigate ambiguity and make sound tradeoffs independently
Experience owning or leading initiatives such as Data Security, DLP, or DSPM

Nice to have

Familiarity with AI data protection tooling (e.g., endpoint DLP, data classification, posture management): BigID, Concentric AI, Varonis, Cyera, or similar
Experience with diverse data domains (analytics/reporting, business operations, people data)
Community contributions (talks, publications, open source)
Familiarity with compliance frameworks such as SOC 1, SOC 2, SOX
Interest in long-term growth as an IC, with openness to future people leadership

About Upstart

Upstart is building technology products around responsible data usage, operating in a security-conscious environment. It maintains an Information Security organization and is hiring to strengthen its Data Security and governance capabilities through software-led security engineering.