Base Salary
$232k - $258k/yr
Responsibilities
- Perform hands-on penetration testing of critical services, applications, APIs, infrastructure, and AI agents.
- Conduct security design reviews and threat modeling for AI agents, agentic systems, web applications, mobile applications, cloud systems, and distributed services.
- Design and build AI-powered automation for security reviews, threat modeling, penetration testing, and vulnerability validation.
- Analyze engineering designs to identify security flaws, attack paths, and risks before production.
- Partner with engineering and security teams to drive systemic vulnerability remediation and strengthen security controls.
- Translate technical findings into actionable guidance for technical and non-technical stakeholders.
- Champion secure engineering practices and serve as a security ambassador across the company.
Requirements
- 7+ years of professional experience in security engineering, threat detection, or client platform engineering.
- Ability to independently analyze complex large-scale system designs, identify security risks and attack paths, and drive solutions across multiple services and dependencies.
- Deep knowledge of threat modeling, vulnerability discovery and classification, security risk assessment, and offensive security methodologies.
- Extensive experience assessing cloud-native services, microservices, distributed systems, APIs, or other large-scale production environments.
- Experience leading complex security assessments and influencing engineering teams across organizational and technical boundaries.
- Experience applying AI/LLMs, agents, or automation frameworks to security testing, vulnerability discovery, threat modeling, or security engineering workflows.
- Hands-on penetration testing experience involving complex applications, services, APIs, and infrastructure.
- Preferred: master’s degree or PhD in a technical field and 10+ years of experience in a cybersecurity leadership or staff-level role.
- Preferred: deep knowledge of cybersecurity, compliance, and privacy, including chaining vulnerabilities and quantifying risks.
- Preferred: experience collaborating with EMs, TPMs, and PMs on prioritization, headcount planning, and technical evaluation.
- Preferred: advanced AI/ML security experience and experience building device attestation or trust tooling at global scale.
- Preferred: ability to collaborate with legal, product, and engineering stakeholders to build trust and accomplish work.
Benefits
- Base salary is USD $232,000–$258,000 per year for roles based in San Francisco, Seattle, or Sunnyvale.
- Eligible for Uber’s bonus program and may receive equity awards and other compensation.
- Eligible for a 401(k) plan and various employee benefits.
Categories
About Uber
We are Uber. The go-getters. The kind of people who are relentless about our mission to help people go anywhere and get anything and earn their way. Movement is what we power. It’s our lifeblood. It runs through our veins. It’s what gets us out of bed each morning. It pushes us to constantly reimagine how we can move better. For you. For all the places you want to go. For all the things you want to get. For all the ways you want to earn. Across the entire world. In real time. At the incredible speed of now. The idea for Uber was born on a snowy night in Paris in 2008, and ever since then our DNA of reimagination and reinvention carries on. We’ve grown into a global platform powering flexible earnings and the movement of people and things in ever expanding ways. We’ve gone from connecting rides on 4 wheels to 2 wheels to 18-wheel freight deliveries. From takeout meals to daily essentials to prescription drugs to just about anything you need at any time and earning your way. From drivers with background checks to real-time verification, safety is a top priority every single day. At Uber, the pursuit of reimagination is never finished, never stops, and is always just beginning.