HHiring Reality
← Upstart

Senior Application Security Engineer

Upstart
Location
United States | Remote
Posted
16 days ago
Department
Engineering Department
What they actually want (must-haves)
  • 5+ years of experience in security engineering, software engineering, or a related technical role, including 2+ years focused on application or product security
  • Experience leading security projects involving multiple contributors or partner teams
  • Experience conducting threat modeling and security architecture reviews for complex production applications
  • Experience developing production software or security automation in Java, Python, Ruby, Go, or a similar programming language
  • Experience designing or implementing application security controls across the software development lifecycle, including several of the following: API security, secure coding standards, SAST, DAST, SCA, CI/CD security, or secrets management
  • Experience identifying, validating, prioritizing, and driving remediation of application vulnerabilities
Nice to have
  • Experience building reusable application security guardrails, platforms, or automation adopted by multiple engineering teams
  • Experience securing modern frontend frameworks, REST or GraphQL APIs, microservices, and event-driven architectures
  • Familiarity with security risks affecting AI/ML and GenAI-enabled systems, including prompt injection, insecure tool use, sensitive-data exposure, and model supply-chain risks
  • Experience using risk metrics or program data to prioritize work and measure improvements in application security outcomes
  • Experience mentoring security or software engineers and raising quality through design and code reviews
What the job really is

As a Senior Application Security Engineer at Upstart, you will lead application security projects, collaborating with various teams to identify security risks and implement preventative measures. Your role will involve conducting threat modeling, designing secure coding standards, and improving vulnerability detection through automation. You will also provide technical leadership during security incidents and mentor other engineers to enhance application security practices across the organization.

Benefits
  • Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly
  • Retirement benefits to help you plan for the future, including a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada)
  • Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees (US only)
  • Comprehensive health coverage designed to support you and your family, including medical, dental, vision, and wellness resources for US and supplemental health coverage for Canada.
  • Health Savings Account contributions from Upstart for eligible plans (US only)
  • Income protection benefits, including life insurance and disability coverage for added financial security
Things to weigh
  • No specific salary listed, but a range is provided based on location
  • The role requires collaboration with multiple teams, which may involve navigating complex organizational dynamics
  • The position is remote but requires some in-person collaboration, which may not suit all candidates
Job score3.6/5
Benefits5/5
Freshness4/5
Career value4/5
Role clarity5/5
Pay transparency0/5

Applying to Upstart?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →