Remote SecOps Engineer - AI-Driven Incident Response

About Upstart

At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence.

As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada.

Digital-first doesn’t mean distant; we’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you.

If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you.

The Team:

Upstart’s Security Operations team is passionate about bringing progressive approaches in securing our products. We believe that security should empower innovation, move at the speed of business, and have safety by design as core principles. Our team’s mission is to ensure the safety of our core product platforms, enterprise, and manage threats to Upstart. We approach our efforts through automation, strong collaboration with our partner teams, and maintaining a positive experience for Upstarters.

As a Sec Ops Engineer at Upstart, you will build automated response mechanisms, triage and respond to critical alerts, hunt for threats in the environment, and help build our security data lake. You’ll share in the team’s responsibility for monitoring and actively defending our corporate and product infrastructure. You'll be a key piece of our Incident Response process, on the front lines of keeping Upstart safe.

• Work closely with system owners to ingest new log feeds for security monitoring
• Enhance and maintain our Detection and Response platforms
• Build in workflows with AI analysis to automatically investigate and triage issues
• Be on the front lines of Incident Response, actively investigating issues and protecting Upstart
• Build common response workflows to expedite investigation and response using AI and SOAR Technology

• Assume breach mindset, chasing down all threads to completion
• Strong Log-fu (ability to build robust log search queries)
• Intermediate proficiency in at least one programming language (preferably Python)
• Strong Git experience (rebasing doesn’t scare you!)

• AWS Experience & Infra as Code management of resources
• OSX Endpoint Investigation Experience
• Internal Application Development Experience
• SaaS Application security experience
• Experience in a high-security environment
• Experience with managing Threat Intelligence

Position location:
Remote-US

Time zone requirements:
The team operates on the East/West coast time zones.

Travel requirements:
As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to spend high quality time in-person collaborating via regular onsites. The in-person sessions cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

Potentially useful references:
Not applicable

At Upstart, your base pay is one part of your total compensation package. The anticipated base salary for this position is expected to be within the below range. Your actual base pay will depend on your geographic location – with our “digital first” philosophy, Upstart uses…