Remote SecOps Engineer — AI‑Driven Incident Response

Upstart; United States; Remote; USD 134,100 - 185,600; Full time

Benefits offered by this job

Competitive compensation

Annual equity grants

401(k) with company match

Health coverage

Job summary

Upstart is seeking a SecOps Engineer to build automated response mechanisms, triage alerts, and hunt for threats. The role involves maintaining security monitoring, incident response, and building AI-driven workflows with SOAR integration.

You will work remotely in the US, with team alignment to East/West coast time zones. The position emphasizes security innovation, fast detection, and collaboration across partner teams.

Qualifications

• 2 years of Incident Detection and Response Engineering experience.
• Assume breach mindset, chasing down all threads to completion.
• Strong Log-fu (ability to build robust log search queries).
• Proficiency in at least one programming language (Python preferred).
• Strong Git experience (rebasing doesn’t scare you!).
• 3+ years of incident detection and response experience (preferred).

Responsibilities

• Ingest new log feeds for security monitoring with system owners.
• Enhance and maintain detection and response platforms.
• Build workflows with AI analysis to automatically investigate and triage issues.
• Be on the frontlines of Incident Response, actively investigating issues and protecting Upstart.
• Create common response workflows to expedite investigation using AI and SOAR technologies.

Skills

Incident Detection

Threat Hunting

Python

Git

Tools

AWS

SOAR

SIEM

Job description

Upstart is seeking a SecOps Engineer to build automated response mechanisms, triage alerts, and hunt for threats. The role involves maintaining security monitoring, incident response, and building AI-driven workflows with SOAR integration.

You will work remotely in the US, with team alignment to East/West coast time zones. The position emphasizes security innovation, fast detection, and collaboration across partner teams.