RemoteLeaf Logo
Log in Sign up

Infrastructure Security Engineer

2 weeks, 1 day ago
United States, Canada
Full-time
Mid Level
Security Engineer
DevOps and Infrastructure
AWS CI/CD Generative AI GitHub Actions Go Helm Java Kubernetes Network Security Python Secrets Management Terraform
Apply Now
Upstart

Upstart

Upstart Powered Loans: Personal, Car Refinance & Consolidation Through Upstart, apply online for a fast personal loan, auto refinancing, or debt consolidation. Try our quick rate check today with no impact to your credit! Founded by ex Googlers, Upstar...

Banks
1K-5K
Founded 2012
View All Jobs 63

Description

  • Design and implement security controls for cloud, platform, and deployment systems with an emphasis on durable risk reduction.
  • Partner with platform, SRE, and infrastructure teams to review designs and changes, identify security risks, and drive remediation plans.
  • Build and improve automation for infrastructure security across cloud IAM, Kubernetes and container environments, secrets handling, and infrastructure-as-code workflows.
  • Identify and remediate systemic weaknesses such as misconfigurations, exposed services, weak trust boundaries, and insecure defaults in production.
  • Support infrastructure vulnerability management by prioritizing findings, validating fixes, and improving detection and prevention over time.
  • Assess and improve security controls for AI-assisted developer workflows and GenAI-enabled systems that interact with sensitive or production environments.
  • Respond to production security issues, investigate root causes using logs, dashboards, and system context, and implement follow-up improvements.
  • Document patterns, participate in design and code reviews, and help raise the security quality bar across engineering teams.

Requirements

  • Bachelor’s degree and 3+ years of experience in security engineering, infrastructure engineering, or a related software engineering role.
  • Experience securing or operating cloud-native infrastructure in AWS or a similar cloud environment.
  • Experience in one or more areas including cloud IAM, Kubernetes/container security, network security, secrets management, or infrastructure vulnerability management.
  • Experience writing code or automation in Python, Go, Java, or a similar programming language.
  • Experience reviewing system designs, infrastructure changes, or architecture proposals and driving actionable security outcomes.
  • Experience with infrastructure-as-code and CI/CD tools such as Terraform, Helm, GitHub Actions, or similar technologies.
  • Experience investigating and resolving moderately complex production or security issues using logs, metrics, and debugging tools.
  • Experience using AI-assisted engineering tools responsibly, with awareness of sensitive data exposure, unsafe automation, access boundaries, and insecure generated code or infrastructure changes.
  • Preferred: Experience building preventative guardrails or automated controls adopted by multiple engineering teams.
  • Preferred: Familiarity with production access control patterns for engineers and service identities.
  • Preferred: Experience with Kubernetes, service-to-service trust models, workload identity, or runtime security controls.
  • Preferred: Experience improving cloud posture management, hardening baselines, or drift detection programs.
  • Preferred: Familiarity with security considerations for AI-assisted engineering workflows, including code generation or code review tooling.
  • Preferred: Experience partnering with Risk, Compliance, or Audit teams in a regulated environment.
  • Preferred: Security certifications such as AWS Security Specialty, GCP Professional Cloud Security Engineer, CISSP, or equivalent practical expertise.

Benefits

  • Anticipated base salary range of $134,100 to $185,600 USD for U.S. remote roles, depending on location and experience.
  • Competitive compensation including target bonuses and annual equity grants that vest quarterly.
  • Generous 401(k) plan with Upstart matching $2 for every $1 contributed, up to $15,000 per year.
  • Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees.
  • Affordable medical, dental, and vision coverage with multiple plan options, with Upstart covering 90% to 100% of the cost depending on the plan.
  • Health Savings Account contributions from Upstart for eligible plans.
  • Paid time off, sick and safe time, and company holidays.
  • Paid family and parental leave, plus family-centered benefits through Carrot and Cleo for fertility, parenthood, and caregiving support.
  • Employee Assistance Program (EAP) with mental health support and life-centered resources.
  • Annual wellness allowance and annual productivity allowance to support well-being, personal development, and tools for remote work.
  • Connection and community through team events, onsites, all-company updates, and employee resource groups.
  • Onsite perks including catered lunches and fully stocked micro-kitchens at office locations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

MetroStar

Sr. Information Systems Security Engineer III (6588)

MetroStar 251-1K IT Services

MetroStar is hiring a Sr. Information Systems Security Engineer to protect its digital assets by designing, implementing, and maintaining cybersecurity controls across networks, systems, cloud environments, and compliance-driven solutions.

United States Full-time Lead Security Engineer
$156k-$193k
Cybersecurity Encryption Splunk
41 minutes ago
Dropbox

Senior Infrastructure Software Engineer, Identity & Auth Engineering

Dropbox 1K-5K Internet Software & Services

Dropbox is hiring a software engineer to re-architect its Identity platform and services for a future as a multi-product company, with work focused on scaling foundational systems across the organization.

Canada Full-time Lead Infrastructure Engineer Security Engineer
$141k-$191k
Go OAuth OpenID Connect Python SAML
6 hours, 56 minutes ago
Marqeta

Principal Security Engineer, Product & AI

Marqeta 251-1K Diversified Financial Services

Marqeta is hiring a Principal Security Engineer to lead product security, AI security, and security architecture oversight for its payment platform and broader infrastructure.

United States Full-time Lead Security Engineer
$218k-$321k
AWS Generative AI Go Java Kubernetes LLM Machine Learning Network Security Python PyTorch SIEM TensorFlow Terraform
8 hours, 4 minutes ago
SAP Fioneer

SAP Basis Support Specialist

SAP Fioneer 1K-5K Internet Software & Services

SAP Fioneer is seeking an experienced SAP Basis Engineer to support in-house product development with a scrum team, ensuring reliable, secure, and high-performing SAP systems for financial services solutions.

India Full-time Mid Level Database Administrator Security Engineer
Scrum
8 hours, 59 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers