Senior Application Security Engineer
Core
Lead application security projects to reduce risk across Upstart's customer-facing products, APIs, and AI-enabled systems while maintaining a positive developer experience.
Role type
Senior Application Security Engineer (IC)
Builds
Secure-by-default controls, security automation services, and guardrails for the software development lifecycle.
Domain
Fintech / AI Lending / Application Security
Deliverable
production ML models | product features | infrastructure
Required skills
Threat modeling, security architecture reviews, secure coding standards, API security, CI/CD security, secrets management, vulnerability remediation, cloud-native security, incident investigation, security automation development
Preferred skills
Building reusable security guardrails/platforms, securing modern frontend frameworks and event-driven architectures, AI/ML and GenAI security risks, risk metrics program management, mentoring engineers, partnering with Legal/Risk/Compliance
Technologies
Java, Python, Ruby, Go, REST, GraphQL, SAST, DAST, SCA
Responsibilities
Lead application security projects from planning through implementation; Conduct threat modeling and security architecture reviews for complex applications and AI/ML systems; Design and implement secure-by-default controls across the SDLC; Partner with engineering teams to identify systemic vulnerabilities and drive remediation; Build services and automation to improve vulnerability detection and prevention; Assess security of AI-enabled products and developer workflows; Provide technical leadership during high-severity security incidents; Improve team effectiveness through design/code reviews and mentoring.
Seniority
Senior, hands-on IC
