Senior Security Engineering Manager, Enterprise Security

About Upstart

At Upstart, we're united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence.

As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that's both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers.

We're proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive.

The Team

Upstart's Security Engineering team protects Upstart's people, systems, products, and data by building and operating security capabilities that reduce risk across the company.

As a Senior Security Manager for Enterprise Security Engineering, you will lead a team responsible for building and maturing security programs across enterprise security, security operations, and detection engineering. You will help define how Upstart identifies, prioritizes, prevents, detects, and responds to security risks across corporate systems, cloud environments, business applications, endpoints, identity platforms, and critical security workflows.

How you'll make an impact

• Lead the strategy, roadmap, and execution for security engineering programs across enterprise security, security operations, and detection security engineering.
• Manage, coach, and develop a team of security professionals, ensuring the team has clear priorities, measurable goals, and opportunities for career growth.
• Build and mature proactive and preventative security controls across corporate systems, cloud environments, identity platforms, endpoints, SaaS applications, and security operations workflows.
• Improve Upstart's ability to detect, investigate, and respond to threats by strengthening detection coverage, alert quality, logging strategy, response playbooks, and automation.
• Drive cross-functional security initiatives across Engineering, IT, Compliance, Legal, Risk, and business teams.
• Establish and report on meaningful security engineering and operations metrics.
• Evaluate and improve security tooling, processes, and controls to reduce systemic risk and increase operational efficiency.

What we're looking for

Minimum requirements

• 8+ years of experience in information security, security engineering, enterprise security, security operations, detection and response, or related domains.
• 3+ years of experience managing security professionals or leading security engineering programs across multiple teams.
• Experience owning roadmaps, priorities, metrics, and execution for security programs with cross-functional dependencies.
• Experience building or operating security capabilities in cloud-based and enterprise environments.
• Experience leading security incidents or operational security programs.
• Experience partnering with Engineering, IT, Compliance, Legal, Risk, or business teams.

Preferred qualifications

• Experience leading security programs across multiple domains (e.g., IAM, cloud security, endpoint security, vulnerability management).
• Demonstrated experience building programs that emphasize proactive and preventative controls and automation.
• Knowledge of AWS, Kubernetes, CI/CD security, SIEM/SOAR, and modern detection engineering practices.
• Ability to communicate security risk and recommendations clearly to technical and non-technical leadership.
• Experience operating in a regulated environment or financial technology company.
• Security certifications such as CISSP, CISM, GIAC, or AWS Security Specialty.

Compensation and Benefits

The anticipated base salary for this position is $190,600 - $263,900 USD, depending on geographic location, skills, and experience.

• Competitive compensation, including base pay, bonus, and annual equity grants.
• 401(k) with company match.
• Comprehensive health coverage (medical, dental, vision).
• Paid time off, sick leave, and company holidays.
• Paid family and parental leave.
• Annual wellness and productivity allowances.
• Financial wellness resources and Employee Assistance Program (EAP).

Location

Remote - US. Most employees are encouraged to spend high-quality time in-person collaborating via regular onsites (typically once or twice per quarter).

Upstart is a proud Equal Opportunity Employer. If you require reasonable accommodation, please email [email protected].