Drimva

Upstart

Principal Platform Security Engineer

$191K–$264K

United States +2 · Remote · Principal · Full-time · Posted Feb 10, 2026

Location
United States
Remote
Remote
Experience
8+ years in a related technical role; 4+ years focused on infrastructure, cloud, platform, or production security. Preferred: 10+ years spanning relevant engineering fields.

About the job

Defines and leads technical strategy, architecture, and scalable security controls for Upstart’s production infrastructure and developer platforms.

What you'll do

  • Own the security roadmap for cloud, platform, compute, and deployment environments, working across engineering organizations.
  • Lead infrastructure security reviews and implement preventative controls, guardrails, and automation.
  • Improve security for AI-assisted developer workflows and GenAI-enabled systems, and provide technical leadership during major incidents.

What they ask for

  • At least 8 years in security engineering, infrastructure engineering, software engineering, or a related technical role, including at least 4 years focused on infrastructure, cloud, platform, or production security.
  • Experience securing cloud-native infrastructure in AWS or a similar cloud environment and across multiple infrastructure security domains.
  • Experience writing code or automation in Python, Go, Java, Ruby, or a similar language.
  • Experience leading security architecture reviews or risk assessments, implementing controls used by multiple teams, and leading cross-functional security initiatives.

Nice to have

  • 10+ years of relevant experience; experience owning a multi-team security roadmap.
  • Experience with Kubernetes and cloud-native security programs; familiarity with security risks in AI-assisted engineering workflows.

Pay

$190,600 — $263,900 USD (base salary)

Tools

AWS, Kubernetes, Python, Go, Java, Ruby, CI/CD, infrastructure-as-code

AI focus

Improve security of AI-assisted developer workflows and GenAI-enabled systems, including agentic tooling, coding assistants, and internal AI integrations that interact with production or sensitive environments.

Model-written summary · the original posting is authoritative

First seen Oct 27, 2026 · Last verified Nov 4, 2026 (UTC)