Senior Detection Engineer

The Team

The Security Operations at Upstart is not a SOC. Instead the SecOps team prioritizes development of monitoring, detection, and automated response for security threats at Upstart, foregoing alert queues commonly within a traditional SOC.

As a Detection Engineer at Upstart, you will help build the monitoring and automated response for security threats throughout the business.

Position Location - This role is available in the following locations: Remote, San Mateo, Columbus 

Time Zone Requirements - This team operates on the East/West Coast time zones.

Travel Requirements - This team has regular on-site collaboration sessions. These occur 5 days per Quarter at one of our office locations or some other off-site location determined by your team/manager. If you need to travel to make these meetups, Upstart will cover all travel related expenses.

How you’ll make an impact:

• Collaborate with DevOps, IT, Software Engineering, and Security Engineering teams to define and prioritize alerting, detection, and prevention of security concerns
• Build and refine detections within the SIEM and log aggregation tools
• Build automated response playbooks in the SOAR tool
• Work closely with system owners to ingest new log feeds for security monitoring
• Design, implement, and maintain technical controls to improve Upstart’s ability to detect and prevent malicious activity
• Develop integrations between the SOAR tool and APIs
• Be part of the Security Operations department’s on-call rotation

What we’re looking for: 

• Minimum requirements:

  • 3+ years of content development on SIEM/SOAR technology OR 5+ years responding to SIEM incidents
  • Strong development practices in Python or similar (application development, git rebase doesn't scare you!)
  • Ability to build robust log search queries (Log-fu/RegEx)
  • Familiarity with network/host-based detection solutions and common network protocols

  Preferred qualifications:

  • 7+ years of Security Operations/Security Engineering experience
  • Experience in a high-security environment
  • Experience with Cloud-native infrastructure environments
  • Technical certifications in the SIEM/Threat Hunting space
  • Threat Hunting/Incident Response experience
  • Knowledge of security frameworks (NIST, COBIT, CIS Top 20)

#LI-MidSenior

What you’ll love: 

• Competitive Compensation (base + bonus & equity)
• Comprehensive medical, dental, and vision coverage
• Personal Development and Technology & Ergonomic Budgets 
• Life insurance and disability benefits 
• Clubs and Activities  (Game Nights, Fitstarters, Superwomen, Book Club, Investing Club, Money Discussions, Photography Club and Basketball teams) 
• Generous vacation policy
• 401(k)
• Catered lunches + snacks & drinks

The minimum base pay for this position in Colorado is $155,000 + bonus + equity + benefits. Base pay may vary depending on job-related knowledge, skills, and experience. This information is provided in accordance with the Colorado Equal Pay Act. It is specific to Colorado and may not be applicable to other locations.