Job Overview
Location
United States | Remote
Job Type
Full-time
Category
Security Engineer
Date Posted
February 24, 2026
Full Job Description
đź“‹ Description
- • As a Principal Security Engineer specializing in Data Security at Upstart, you will be at the forefront of safeguarding our most critical asset: data. This pivotal role demands a unique blend of deep technical expertise, strategic program leadership, and cross-functional collaboration to architect, build, and operationalize robust data security solutions. You will be instrumental in shaping and executing Upstart’s data security strategy, ensuring that our innovative AI lending marketplace operates with the highest standards of data protection and privacy.
- • Your primary responsibility will be to lead the design and implementation of Upstart’s comprehensive data security program. This involves establishing foundational elements, developing scalable systems, and continuously evolving our security posture to meet the dynamic threat landscape and regulatory requirements. You will own the end-to-end lifecycle of data security initiatives, from conceptualization and architectural design to deployment and ongoing management.
- • A significant aspect of this role involves hands-on software engineering. You will architect and build software solutions, including APIs, services, and internal tools, that are crucial for enabling effective data protection, access control, and governance. This requires a strong understanding of secure coding practices, distributed systems, and the ability to deliver production-quality code that integrates seamlessly into our technology stack.
- • You will serve as a key partner to a wide array of stakeholders across the organization. This includes close collaboration with Engineering, Analytics, Product Management, Legal, Risk, HR, and other business units. Your ability to understand their data needs and translate them into actionable security requirements will be critical in securing sensitive data across diverse domains, from customer information and financial data to internal operational data.
- • Establishing clear goals, defining measurable success metrics, and ensuring accountability for all data security initiatives will be a core part of your role. You will be responsible for tracking progress, reporting on the effectiveness of security controls, and driving continuous improvement across the program.
- • A major focus will be on driving the adoption of least-privilege access models and modern data protection patterns throughout the organization. This involves not only defining these principles but also developing the tools and processes to enable teams to implement them effectively and at scale, fostering a culture where security is a shared responsibility.
- • You will play a vital role in mentoring and guiding other engineers and security practitioners. By sharing your expertise, fostering strong technical standards, and promoting a culture of ownership and continuous learning, you will help elevate the overall security competency within the team and the broader engineering organization.
- • Continuous improvement is key. You will be expected to learn from real-world signals, including operational feedback, incident post-mortems, false positive rates, and evolving threat intelligence, to refine and enhance our security systems and processes. This iterative approach ensures our data security measures remain effective and adaptive.
- • This role is ideal for a senior security professional who thrives at the intersection of deep technical execution, architectural design, and program leadership. If you have a proven track record of taking complex security programs from inception to maturity in fast-paced, innovative environments, and are passionate about protecting data in a rapidly growing technology company, this is an exceptional opportunity.
- • You will be instrumental in defining the future of data security at Upstart, ensuring that as we scale, our commitment to protecting customer and company data remains unwavering. Your work will directly contribute to maintaining customer trust, ensuring regulatory compliance, and enabling Upstart’s mission to reduce the cost and complexity of borrowing for all Americans.
- • This position requires a proactive and strategic mindset, with the ability to anticipate future security needs and proactively design solutions. You will be empowered to make significant technical decisions and influence the security roadmap for the company.
- • You will also contribute to the development of security best practices and standards, ensuring they are practical, scalable, and aligned with Upstart’s business objectives and engineering culture.
- • The role involves staying abreast of the latest advancements in data security technologies, threats, and regulatory landscapes, and applying this knowledge to Upstart’s specific context.
- • Ultimately, you will be a key guardian of Upstart’s data integrity, confidentiality, and availability, enabling our continued growth and success.
🎯 Requirements
- • Extensive experience across enterprise and operational security domains, with a deep focus on Data Security and Identity & Access Management.
- • Proven experience leading security programs that span multiple teams and functions, with a track record of successful delivery.
- • Strong software engineering background, with the ability to design and build production-quality systems (e.g., APIs, services, or internal web applications).
- • Experience launching new security capabilities or programs from 0 to 1 in complex environments.
- • Deep understanding of least-privilege principles and practical experience applying them at scale.
- • Excellent communication skills, with the ability to influence senior technical and non-technical stakeholders.
- • Ability to navigate ambiguity, make sound tradeoffs, and independently drive meaningful change.
🏖️ Benefits
- • Competitive compensation, including base pay, bonus opportunities, and annual equity grants.
- • Generous 401(k) plan with significant company matching.
- • Comprehensive medical, dental, and vision coverage with substantial employer contributions.
- • Paid time off, sick and safe time, and company holidays.
- • Paid family and parental leave.
- • Annual wellness and productivity allowances.
- • Employee Stock Purchase Plan (ESPP).
Skills & Technologies
Apache Spark
Senior
Remote
About Upstart Holdings, Inc.
Upstart Holdings, Inc. operates a cloud-based lending platform that uses artificial intelligence to assess borrower credit risk beyond traditional FICO scores. Founded by ex-Googlers in 2012 and headquartered in San Mateo, California, the company partners with banks and credit unions to originate personal, auto refinance, and small-dollar loans. Its machine-learning models analyze education, employment, and cash-flow data to predict default likelihood, enabling higher approval rates and lower APRs for consumers while reducing fraud and loss rates for lenders. Upstart earns fees from loan facilitation, servicing, and referral services; it does not hold loans on its balance sheet.
Get more remote jobs like this
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
