Cloud & Application Security Engineer

Meet Upside:

We created Upside to help communities thrive! Our retail technology uses the sophistication of online retail—profit measurement, attribution, and incrementality—to provide users with more value on their everyday purchases and brick and mortar businesses with new, profitable customers. We’ve helped millions of users earn 2 to 3 times more cash back than any other product, and tens of thousands of brick and mortar businesses earn measurable profit. Billions of dollars in commerce run through the Upside platform every year, and that value goes directly back to our local retailers, the consumers they serve, and towards important sustainability initiatives. Our mission, values, and commitment to inclusivity guide our team of more than 300 people worldwide, and the quality of our culture is reflected in the impact we’ve had on communities nationwide. You’ll join a Team whose experience hails from places such as Google, Uber, Amazon, Instacart, Capital One, and MasterCard with proven startup executives and venture capitalists.

Upside was named #2 on Deloitte's 2021 list of Fastest Growing 500 Tech Companies and  #308 in Inc.’s America’s fastest growing private companies of 2022. Upside’s Series D funding was raised in March 2022 and led by General Catalyst at a $1.5 billion valuation. Other investors include Bessemer Ventures and Formation8.

Meet the Information Security Team:

The Upside Information Security team is a small tight knit group which has successfully implemented complex security standards across the company. We anticipate growth for the company and that means growth for us! We believe partnership and collaboration are the best path to build awareness and scale security concerns across the entire organization.

What you'll do:

• Identify potential vulnerabilities to our cloud and application
• Engineer and code security solutions to remediate issues and add protection
• Support engineering teams to adopt security best practices
• Interact directly with the security community regarding vulnerabilities and threats
• Conduct regular security assessments

What you bring:

• 2+ years of security engineering experience, including application code vulnerability management a mix of the following:
• Application security training, application pentesting, secrets management, threat modeling, IaC security, container security, end-user authentication, cloud security (CSPM), Web Application Firewall, API Security
• Experience with AWS, Azure or another cloud platform
• Coding experience in Python and Java
• Bachelor’s degree highly preferred

Our Technology Stack:

• Terraform
• Python for Automation 
• Kubernetes clusters in AWS EKS
• Java microservices using 12-factor principles
• AWS Lambdas written in Java and Python 3 
• Message Oriented Architecture
• Jenkins and Github Action CI/CD pipeline 
• AWS Services managed through Terraform (RDS), DynamoDB, S3, Athena, SNS, SQS, IAM, VPCs, Elasticache)
• Snowflake
• Github

The fine print:

• Notice to recruiters and placement agencies: This is an in-house search with a dedicated resource. Please do not submit resumes to any person or email address at Upside. Upside is not liable for, and will not pay, placement fees for candidates submitted by any party or agency other than its approved recruitment partners.

At Upside, we believe that diversity drives innovation. Our differences are what make us stronger. We‘re passionate about building a workplace that represents a variety of backgrounds, skills, and perspectives and does not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Everyone is welcome here. Come join us!