Infrastructure Security Engineer at Upstart · LumiJobs · LumiJobs

Qualification

Experience reviewing system designsExperience with KubernetesExperience partnering with Risk

Bachelor’s degree and 3+ years of experience in security engineering, infrastructure engineering, or a related software engineering role.
Experience securing or operating cloud-native infrastructure in AWS or a similar cloud environment.
Experience with one or more of the following domains: cloud IAM, Kubernetes/container security, network security, secrets management, or infrastructure vulnerability management.
Experience writing code or automation in Python, Go, Java, or a similar programming language.
Experience reviewing system designs, infrastructure changes, or architecture proposals and driving actionable security outcomes.
Experience with infrastructure-as-code and CI/CD tooling such as Terraform, Helm, GitHub Actions, or similar technologies.
Experience investigating and resolving moderately complex production or security issues using logs, metrics, and debugging tools.
Experience using AI-assisted engineering tools responsibly, with an understanding of security considerations such as sensitive data exposure, unsafe automation, access boundaries, or insecure use of generated code and infrastructure changes.

Experience building preventative guardrails or automated controls that are adopted by multiple engineering teams.
Familiarity with production access control patterns for engineers and service identities.
Experience with Kubernetes, service-to-service trust models, workload identity, or runtime security controls.
Experience improving cloud posture management, hardening baselines, or drift detection programs.
Familiarity with security considerations for AI-assisted engineering workflows, including code generation or code review tooling.
Experience partnering with Risk, Compliance, or Audit teams in a regulated environment.
Security certifications such as AWS Security Specialty, GCP Professional Cloud Security Engineer, CISSP, or equivalent practical expertise.
Position location This role is available in the following locations: Remote

Infrastructure Security Engineer