Upstart
Senior Security Engineering Manager, Product Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Upstart
Upstart Holdings, Inc. is a fintech company based in Palo Alto, California, founded in 2012. The company specializes in using artificial intelligence to enhance the lending process, connecting consumers with banks and credit unions. Upstart's mission is to reduce the cost and complexity of borrowing for Americans by leveraging AI models and cloud applications, allowing lenders to approve more borrowers at competitive rates. The company offers a range of AI-powered lending products, including personal loans, automotive retail and refinance loans, home equity lines of credit, and small dollar relief loans. Upstart partners with over 100 banks and credit unions, enabling them to utilize its AI technology for improved borrower approval rates and portfolio growth. The platform also provides services tailored for lenders and auto dealers, focusing on digital-first experiences and efficient financing solutions. Upstart continues to innovate in the lending space, emphasizing responsible AI use and inclusive credit access.
Security at Upstart
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Upstart's stated mission is that keeping personal and financial information secure is their top priority.
- Their philosophy emphasizes that security should empower innovation and move at the speed of business, achieved through automation and strong collaboration.
- They also focus on new standards around AI safety and security, continuously evaluating, testing, and improving over time.
Security Team
The Application Security team is part of the Information Security team. Pavi Ramamurthy serves as the Chief Information Security Officer of Upstart. While specific AppSec team size is not publicly available, there are active job postings for roles such as Principal Application Security Engineer and Principal Security Engineer. Common skill patterns include knowledge of SAST/DAST and vulnerability scanners.
Key Initiatives
- Upstart does not publicly provide explicit statements describing a formal Security Champions program.
- Their approach to security involves empowering innovation and moving at the speed of business through automation and collaboration.
- They manage vulnerability remediation and accept vulnerability reports via a web form.
- Security measures include encrypting customer data, implementing web application and network firewalls, and strict access controls.
- The organization continuously evaluates, tests, and improves, with a focus on new standards for AI safety and security.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.