Principal Security Product Manager

Upstart

3d•$210,000 - $273,000•Remote

About The Position

Upstart’s Information Security team builds and operates capabilities that protect systems and data while enabling engineering teams to move quickly and responsibly. The team partners with Engineering, Risk, Compliance, Legal, IT, and Cloud Platform to reduce security risk, strengthen regulatory readiness, and make secure development easier to adopt at scale. The Principal Security Product Manager defines the product vision and roadmap for critical security capabilities spanning AI-powered security, vulnerability management, security automation, and risk visibility. The role translates user, security, business, and regulatory needs into products that engineers adopt and that deliver measurable improvements in security risk. It is remote and includes periodic in-person team onsites; the cadence varies by team, with most teams meeting once or twice per quarter for two to four consecutive days. The anticipated U.S. remote base salary range is $210,000–$273,000. Actual pay depends on location, job-related skills, experience, and education or training. Compensation also includes target bonuses and equity, alongside benefits for full-time employees.

Requirements

Bachelor’s degree in Computer Science, Engineering, Mathematics, Statistics, or a related field, or equivalent practical experience.
At least 7 years of product management experience, including at least 3 years owning security, risk, developer-facing, or platform products.
Experience owning complex technical products from product vision and roadmap development through requirements, launch, adoption, measurement, and continuous improvement.
Experience partnering with engineering teams to define technical requirements, scope MVPs, prioritize roadmaps, and make build-versus-buy decisions.
Experience in security domains such as vulnerability management, application security, cloud security, security automation, or remediation workflows.
Experience defining and measuring product success using adoption, usage, quality, risk, or other quantitative product metrics.

Nice To Haves

Experience building AI-powered products, AI-enabled developer tools, or products involving AI governance and model evaluation.
Experience with developer tools, security platforms, or internal platform products used by engineering teams.
Experience building products in banking, financial services, or another regulated environment, including supporting regulatory examinations or audits.
Knowledge of security and compliance frameworks such as NIST CSF, SOC 2, or PCI DSS.
Familiarity with security tooling such as ArmorCode, Wiz, Semgrep, SIEM platforms, or similar technologies.

Responsibilities

Define product vision, strategy, and roadmaps for critical security capabilities, prioritizing investments based on user needs, risk impact, business value, and regulatory requirements.
Partner with security engineers and engineering teams to turn pain points into requirements, scope MVPs, sequence releases, and make build, buy, and retire decisions.
Drive adoption of security products and workflows that fit engineering teams’ ways of working; measure success through feedback, usage, accuracy, and risk-reduction metrics.
Shape a connected AI-powered security platform spanning security reviews, continuous testing, vulnerability remediation, risk scoring, and reporting.
Incorporate regulatory and audit requirements into product design, including evidence, audit trails, metrics, and controls that support ongoing readiness.
Communicate product strategy, investment tradeoffs, adoption, and measurable security outcomes to Information Security leadership and senior stakeholders.

Benefits

Target bonuses and equity compensation.
Medical, dental, and vision coverage, wellness resources, and supplemental health coverage in Canada.
401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually.
Employee Stock Purchase Plan with discounted stock purchase options for eligible U.S. employees.
Health Savings Account contributions for eligible U.S. plans.
Life insurance and disability coverage.
Paid time off, sick leave, and company holidays in line with local requirements.
Paid family and parental leave; duration varies by country.
Family-centered benefits supporting fertility, parenthood, and caregiving.
Employee Assistance Program with mental health support and life-centered resources.
Financial wellness resources, including financial planning tools and a financial concierge service in the U.S.
Annual wellness allowance supporting physical and emotional well-being and personal development.
Annual productivity allowance for relevant tools and resources.
Team events, all-company updates, and employee resource groups.
Catered lunches and stocked micro-kitchens when working from offices in the Bay Area, Austin, Columbus, and New York City.