Security Operations Engineer (SecOps) II

The Team: 

Upstart’s Security Operations team is passionate in bringing progressive approaches in securing our products. We believe that security should empower innovation, move at the speed of business, and have safety by design as core principles. Our team’s mission is to ensure the safety of our core product platforms, enterprise, and manage threats to Upstart. We approach our efforts through automation, strong collaboration with our partner teams, and maintaining a positive experience for Upstarters.

As a SecOps Engineer at Upstart, you will build  automated response mechanisms, triage and respond to critical alerts, hunt for threats in the environment, and help build our security data lake. You’ll share in the team’s responsibility for monitoring and actively defending our corporate and product infrastructure. You'll be a key piece of our Incident Response process, on the front lines of keeping Upstart safe.

How you’ll make an impact

• Work closely with system owners to ingest new log feeds for security monitoring
• Enhance and  maintain our Detection and Response platforms
• Build in workflows with AI analysis to automatically investigate and triage issues
• Be on the frontlines of Incident Response, actively investigating issues and protecting Upstart
• Build common response workflows to expedite investigation and response using AI and SOAR Technology

Minimum Qualifications 

• 2 years of Incident Detection and Response Engineering experience
• Assume breach mindset, chasing down all threads to completion
• Strong Log-fu (ability to build robust log search queries)
• Solid Proficiency in at least one programming language (preferably Python)
• Strong Git experience (rebasing doesn't scare you!)

Preferred Qualifications

• AWS Experience & Infra as Code management of resources
• OSX Endpoint Investigation Experience
• Internal Application Development Experience
• SaaS Application security experience
• Experience in a high-security environment
• Experience with managing Threat Intelligence
• 3+ years of Incident Detection and Response Engineering experience

Position location This role is available in the following locations: Remote-US

Time zone requirements The team operates on the East/West coast time zones. 

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

#LI-REMOTE

#LI-Senior