Teams at Upstream Security

Lead reliability, scalability, and performance for production environments. Operate Kubernetes and cloud infrastructure across AWS, Azure, and GCP; develop automation and deployment processes; monitor customer environments; maintain cloud and product security; troubleshoot technical issues; and collaborate with cross-functional teams to improve operational efficiency and system availability.

Investigate and respond to connected-vehicle and API security incidents, lead complex investigations, conduct threat hunting, tune detections, and improve SOC playbooks. Deploy and maintain agentic AI workflows for triage and response, monitor their performance, advise customers, mentor analysts, produce reports, and support rotating on-call operations.

Leads investigations and responses to vehicle, API, mobility, and backend cybersecurity incidents. Responsibilities include threat hunting, OSINT, detection tuning, AI workflow deployment and monitoring, playbook development, customer advising, incident reporting, mentoring analysts, and tracking SOC performance. The role also improves detection models and collaborates with threat intelligence, engineering, product, and customer-facing teams.