or apply directly on Upstart's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 12 days Upstart's roles stay open a median of 45 days
- Reposted
- No
- Salary listed
- No 0% of Upstart's roles list one
- Ghost-job risk at Upstart
- high 61 stale, 5 reposted of 93 open
- Hiring momentum
- 135 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-09-17
Measured from postings appearing on and disappearing from Upstart's own greenhouse board since 2026-08-03. Full hiring picture for Upstart.
About this role
As a Senior Application Security Engineer at Upstart, you will lead application security projects, collaborating with various teams to identify security risks and implement preventative measures. Your role will involve conducting threat modeling, designing secure coding standards, and improving vulnerability detection through automation. You will also provide technical leadership during security incidents and mentor other engineers to enhance application security practices across the organization.
- benefits
- 5/5
- freshness
- 4/5
- career value
- 4/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Upstart as an employer.
What you need
- 5+ years of experience in security engineering, software engineering, or a related technical role, including 2+ years focused on application or product security
- Experience leading security projects involving multiple contributors or partner teams
- Experience conducting threat modeling and security architecture reviews for complex production applications
- Experience developing production software or security automation in Java, Python, Ruby, Go, or a similar programming language
- Experience designing or implementing application security controls across the software development lifecycle, including several of the following: API security, secure coding standards, SAST, DAST, SCA, CI/CD security, or secrets management
- Experience identifying, validating, prioritizing, and driving remediation of application vulnerabilities
Nice to have
- Experience building reusable application security guardrails, platforms, or automation adopted by multiple engineering teams
- Experience securing modern frontend frameworks, REST or GraphQL APIs, microservices, and event-driven architectures
- Familiarity with security risks affecting AI/ML and GenAI-enabled systems, including prompt injection, insecure tool use, sensitive-data exposure, and model supply-chain risks
- Experience using risk metrics or program data to prioritize work and measure improvements in application security outcomes
- Experience mentoring security or software engineers and raising quality through design and code reviews
What you get
- Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly
- Retirement benefits to help you plan for the future, including a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada)
- Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees (US only)
- Comprehensive health coverage designed to support you and your family, including medical, dental, vision, and wellness resources for US and supplemental health coverage for Canada.
- Health Savings Account contributions from Upstart for eligible plans (US only)
- Income protection benefits, including life insurance and disability coverage for added financial security
Worth weighing
- No specific salary listed, but a range is provided based on location
- The role requires collaboration with multiple teams, which may involve navigating complex organizational dynamics
- The position is remote but requires some in-person collaboration, which may not suit all candidates
Summarised from Upstart's posting. Read the full original.
Listed by Upstart on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.
More roles at Upstart
- Staff Machine Learning Model Risk SpecialistUnited States | Remote
- Compliance Manager, BSA/AML ProgramUnited States | Remote
- Senior Complaints SpecialistUnited States | Remote
- Principal Product Manager, GrowthUnited States | Remote
- Software Engineer, Cash LineUnited States | Remote
- Senior Manager, Product Design - Design PlatformUnited States | Remote
- Head of Borrower SuccessUnited States | Remote
- Senior Product Manager, PaymentsUnited States | Remote