Base Salary
$180k - $200k/yr
Responsibilities
- Lead security and privacy design reviews across services, applications, APIs, infrastructure, and AI systems.
- Perform threat modeling, attack-path analysis, code-assisted security reviews, penetration testing, and adversarial assessments of third-party AI agents.
- Analyze sensitive-data lifecycles, privacy controls, trust boundaries, authorization, permissions, and system architecture.
- Own complex assessments from scoping and technical analysis through remediation guidance, stakeholder alignment, and control validation.
- Partner with engineering, security, privacy, and third-party teams to resolve vulnerabilities and influence architectural decisions.
- Build AI-powered automation, security tooling, assessment methodologies, threat models, and reusable frameworks.
- Identify systemic vulnerabilities and provide technical guidance to other security practitioners.
Requirements
- 5+ years of professional experience in security engineering, application security, product security, offensive security, or related technical security roles.
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
- Experience independently leading complex security assessments and reviewing technical designs across applications, APIs, cloud services, distributed systems, infrastructure, and integrations.
- Advanced experience with threat modeling, attack-surface analysis, trust boundaries, chained attack paths, and security mitigations.
- Strong knowledge of authentication, authorization, identity, least privilege, data protection, isolation, and sensitive-data handling.
- Significant hands-on experience with security testing, vulnerability research, penetration testing, or adversarial testing.
- Ability to analyze source code, architecture, APIs, and runtime behavior to identify vulnerabilities and validate controls.
- Proficiency developing security tooling and automation using Python, Go, or similar languages, including AI-assisted development.
- Preferred experience assessing AI agents, LLM applications, agentic systems, prompt-injection risks, excessive permissions, tool misuse, and insecure integrations.
- Preferred experience with privacy design reviews, AI-powered security workflows, security knowledge systems, assessment benchmarking, and reusable security frameworks.
- Strong written and verbal communication skills and ability to influence technical decisions and drive remediation across organizational boundaries.
Benefits
- Base salary is USD $180,000-$200,000 per year for San Francisco and Sunnyvale, California-based roles.
- Eligibility for Uber’s bonus program and possible equity awards and other compensation.
- 401(k) plan eligibility for all full-time employees.
- Various employee benefits are available.
About Uber
We are Uber. The go-getters. The kind of people who are relentless about our mission to help people go anywhere and get anything and earn their way. Movement is what we power. It’s our lifeblood. It runs through our veins. It’s what gets us out of bed each morning. It pushes us to constantly reimagine how we can move better. For you. For all the places you want to go. For all the things you want to get. For all the ways you want to earn. Across the entire world. In real time. At the incredible speed of now. The idea for Uber was born on a snowy night in Paris in 2008, and ever since then our DNA of reimagination and reinvention carries on. We’ve grown into a global platform powering flexible earnings and the movement of people and things in ever expanding ways. We’ve gone from connecting rides on 4 wheels to 2 wheels to 18-wheel freight deliveries. From takeout meals to daily essentials to prescription drugs to just about anything you need at any time and earning your way. From drivers with background checks to real-time verification, safety is a top priority every single day. At Uber, the pursuit of reimagination is never finished, never stops, and is always just beginning.