Principal DevSecOps Developer

Upgrade helps customers move in the right direction with affordable and responsible financial products. Since 2017, we’ve helped over 7.5 million customers access over $42 billion in consumer credit. With a relentless focus on improving our customers' financial well-being, we build products that put more money in their pocket and support their journey toward a better financial future. We’re backed by some of the most prominent technology investors and were most recently valued at $7.3B. We’re consistently recognized for our collaborative and inclusive culture. Most recently, we were named one of the World’s Top Fintech Companies by CNBC, Best Places to Work by Built In, Best Places to Work by the San Francisco Business Times, America’s Greatest Workplaces by Newsweek, Best Startup Employer by Forbes, and Healthiest Employers by Phoenix Business Journal. We’re looking for new team members who get excited about designing and delivering new and better products. Come join us and help build a better financial future for millions of people. About the Role: We are looking for a highly technical, hands-on Principal DevSecOps Developer to join Upgrade's Security team. In this role, you'll focus on building and improving security automation, strengthening our SaaS environment, and developing scalable solutions that enhance security operations across the organization. You'll leverage your programming and scripting skills, hands-on operations experience, and understanding of APIs, IAM permissions, and security best practices to solve complex technical challenges. You'll analyze code, troubleshoot technical issues, and apply risk-based thinking to identify vulnerabilities and implement effective security controls. This is a highly autonomous, engineering-focused role where you'll have the opportunity to build security automations from the ground up, leverage AI to improve workflows, and solve challenging security problems. You'll work closely with Security, Engineering, DevOps, and IT teams to streamline processes. Our Core Technologies: AWS (IAM, Security Services), Terraform, Python, Bash, REST APIs, AI/LLM Tools (Claude, AI Agents, MCP), Tines/SOAR, Sumo Logic, CrowdStrike, Okta, Akamai, Sublime Security, SIGMA/YARA, Kubernetes, Docker, CI/CD Pipelines, FleetDM/osquery, GCP, Google Workspace, Microsoft Entra ID, Microsoft 365. What You’ll Do: • Build and maintain security automation workflows to reduce manual processes. • Develop and manage infrastructure as code using Terraform. • Implement AWS security controls, including IAM policies and least-privilege access. • Build secure integrations between systems using APIs and scripting. • Identify, investigate, and resolve security risks across cloud infrastructure and internal systems. • Use AI tools, agents, and MCP integrations to improve security workflows. • Troubleshoot issues across infrastructure, networking, and security tools. • Develop and improve security monitoring, detection, and response capabilities. • Partner with Engineering, DevOps, and IT teams to implement security improvements. • Proactively identify opportunities to strengthen security and automate processes. What We Look For: • Strong programming, scripting, and automation skills across one or more languages. • Hands-on AWS security experience, including IAM permissions and least-privilege principles. • Strong Terraform skills, including independently writing and maintaining modules. • Solid understanding of APIs, authentication, and secure integrations. • Knowledge of security fundamentals, risk analysis, and cloud security best practices. • Strong troubleshooting skills across infrastructure, networking, and technical operations. • Experience using AI development tools while independently val