Infrastructure Security Engineer

Upstart

Remote Actively hiring Verified listing
Remote (San Mateo, CA, US) Posted 30 days ago Apply by Sep 1, 2026 $134,100–$185,600 / year
Apply Now Log in to save

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $164k
This role $160k
$103k most similar roles pay here $208k

This role pays less than 51% of similar roles. Most pay $142,287–$184,900 — the shaded band above. At the midpoint, this role pays about $160k versus about $164k for comparable roles.

Based on 240 similar postings.

Employer

About Upstart

Upstart is an AI lending platform that partners with banks and credit unions to expand access to affordable credit using non-traditional variables.

Upstart currently has 40 open roles on FindRole.

Listed pay typically runs $177,200–$245,400 across 40 roles with salary data.

Most-posted roles

View all roles at Upstart

At a glance

TL;DR

As a Security Engineer II on Upstart’s Infrastructure Security team, you will design and implement security controls for cloud, platform, and deployment systems to ensure secure defaults and durable risk reduction. You’ll collaborate with platform, SRE, and infrastructure teams to review designs, identify risks, and drive remediation plans, while also building automation for areas like cloud IAM, Kubernetes, secrets management, and CI/CD workflows. Your role involves identifying systemic weaknesses in production environments, supporting vulnerability management, and enhancing security for AI-assisted developer tools. You should have 3+ years of experience in security engineering with a focus on cloud-native infrastructure, proficiency in Python or Go, and familiarity with Terraform, Helm, and GitHub Actions. Preferred candidates also have experience with Kubernetes trust models, production access control patterns, and working in regulated environments.

Skills

AWS Kubernetes Terraform Python Go CI/CD Helm GitHub Actions Prometheus Grafana PostgreSQL AI-assisted engineering tools Cloud IAM Secrets management Infrastructure vulnerability management

What you'll do

  • Design and implement security controls to protect cloud, platform, and deployment systems.
  • Review architecture changes with engineering teams to identify and mitigate security risks.
  • Build automation for infrastructure security, including Kubernetes and container environments.
  • Identify and remediate systemic weaknesses in production environments to enhance security.
  • Support vulnerability management by prioritizing findings and validating fixes.
  • Assess and improve security controls for AI-assisted developer workflows and systems.
  • Investigate root causes of production security issues using logs and metrics.

What we're looking for

  • Bachelor’s degree and 3+ years of experience in security engineering or related field.
  • Experience securing cloud-native infrastructure in AWS or similar environment.
  • Proficiency with Python, Go, Java, or equivalent programming language for automation.
  • Expertise in cloud IAM, Kubernetes/container security, network security, secrets management.
  • Hands-on experience with infrastructure-as-code and CI/CD tooling like Terraform, Helm.
  • Ability to review system designs and drive actionable security outcomes.
  • Experience investigating and resolving moderately complex production issues using logs.

More like this

Similar roles

Security Engineer

Booz Allen Hamilton

Annapolis Junction, MD 22 days ago $112,800–$257,000
Elasticsearch Kibana Logstash Beats Fleet ES QL EQL Elastic Security SOAR n8n XSOAR Elastic transforms runtime fields RAG architectures vector search Python scikit-learn PyTorch AI/ML concepts
Save

Security Engineer

Leidos

Reston, VA 17 days ago $131,300–$237,350
AWS Azure DISA_STIGs Nessus Splunk PRTG Trellix_Endpoint_Security ePolicy_Orchestrator CI/CD Agile Linux RHEL Windows Python SQL PostgreSQL Active_Directory Network_Monitoring SIEM Threat_Modeling OWASP Microsoft_Threat_Modeling_Tool NIST_RMF Red_Hat_OpenShift Kubernetes Terraform
Save

Security Engineer

Adobe

Seattle 60 days ago $180,600–$261,450
Entra ID AD Okta SailPoint Zero Trust RBAC ABAC M365 Slack GitHub Workday Google Python PowerShell Terraform Teleport Vault SPIFFE SPIRE CI/CD
Save

Security Systems Engineer

Booz Allen Hamilton

Atlanta, GA 14 days ago $69,300–$158,000
Armis Elastic Stack Bash Perl JavaScript Python CI/CD Kubernetes Docker AWS Azure Google Cloud Platform Terraform Ansible PostgreSQL MongoDB Redis Git Jenkins Prometheus Grafana Splunk SIEM Nmap Wireshark
Save

Technical Security Engineer

Booz Allen Hamilton

Columbia, MD 29 days ago $99,000–$225,000
NIST SP 800-53 RMF RHEL Red Hat Enterprise Linux Rocky Git SCAP ACAS Tenable Splunk Linux firewalls Linux RPMs networking configuration DNS TCP/IP firewalls VLANs routing VPN
Save