Uber

Security Engineer II - Design Review/Threat Modeling

Uber
Apply
20 hours ago
Seattle, WA, USAMid Level
H1B sponsor

Base Salary

$171k - $190k/yr

Responsibilities

  • Conduct security design reviews and threat modeling for services, applications, APIs, infrastructure, mobile platforms, AI systems, and production software.
  • Assess third-party AI agents through adversarial testing of behavior, tool use, data access, permissions, prompt injection, and external integrations.
  • Perform hands-on penetration testing to identify exploitable vulnerabilities and complex attack paths.
  • Design and build AI-powered automation for security reviews, threat modeling, penetration testing, and offensive security assessments.
  • Analyze engineering proposals, cloud and infrastructure designs, application and data-layer security, and distributed-system trade-offs.
  • Translate security findings into actionable guidance and systemic improvements for technical and non-technical stakeholders.
  • Collaborate with engineering and security teams to identify design flaws before production and strengthen security controls.
  • Champion secure engineering practices and serve as a security ambassador across the company.

Requirements

  • At least 3 years of professional experience in security engineering, systems architecture, or a related software engineering field.
  • Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
  • Ability to analyze complex system designs and provide technical input for security challenges involving multiple dependencies.
  • Knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
  • Experience with cloud-native services, microservices, distributed systems, or related security designs.
  • Experience with security design reviews and threat modeling across applications, services, APIs, infrastructure, mobile platforms, and AI systems.
  • Ability to identify complex attack paths and systemic weaknesses across application, infrastructure, identity, data, and trust boundaries.
  • Experience with code-assisted security reviews and large-scale distributed or cloud-native architectures.
  • Advanced proficiency in at least one backend language such as Go, Java, or Python.
  • Experience with multi-cloud environments such as AWS and GCP and with SQL or NoSQL data stores.
  • Experience applying AI, LLMs, agents, or automation frameworks to security testing or security engineering workflows.
  • Experience with automated CI/CD environments or a mature Secure Software Development Lifecycle.

Benefits

  • Base salary range of USD $171,000 to USD $190,000 per year for Seattle, Washington-based roles.
  • Eligibility for Uber’s bonus program and potential equity awards and other compensation.
  • 401(k) plan eligibility for full-time employees.
  • Various employee benefits.
Uber

About Uber

10,000+ employees

We are Uber. The go-getters. The kind of people who are relentless about our mission to help people go anywhere and get anything and earn their way. Movement is what we power. It’s our lifeblood. It runs through our veins. It’s what gets us out of bed each morning. It pushes us to constantly reimagine how we can move better. For you. For all the places you want to go. For all the things you want to get. For all the ways you want to earn. Across the entire world. In real time. At the incredible speed of now. The idea for Uber was born on a snowy night in Paris in 2008, and ever since then our DNA of reimagination and reinvention carries on. We’ve grown into a global platform powering flexible earnings and the movement of people and things in ever expanding ways. We’ve gone from connecting rides on 4 wheels to 2 wheels to 18-wheel freight deliveries. From takeout meals to daily essentials to prescription drugs to just about anything you need at any time and earning your way. From drivers with background checks to real-time verification, safety is a top priority every single day. At Uber, the pursuit of reimagination is never finished, never stops, and is always just beginning.

Contact me