Base Salary
$153k - $170k/yr
Responsibilities
- Lead complex security and privacy design reviews across services, applications, APIs, infrastructure, cloud systems, and AI systems.
- Lead threat modeling and attack-path analysis, identifying attack surfaces, trust boundaries, abuse cases, chained attack paths, and architectural weaknesses.
- Conduct adversarial assessments and penetration testing of third-party AI agents and agentic systems, including their models, data, permissions, tools, integrations, and runtime behavior.
- Perform code-assisted security reviews to validate architecture, authorization boundaries, security controls, and exploitability.
- Analyze sensitive-data lifecycles and partner with privacy stakeholders to develop safeguards.
- Own security assessments from scoping and technical analysis through risk determination, remediation guidance, stakeholder alignment, and validation.
- Partner with engineering, security, privacy, and third-party teams to resolve findings and influence architectural decisions.
- Design AI-powered automation, assessment methodologies, threat models, testing techniques, and reusable security frameworks.
- Identify systemic vulnerabilities and develop durable controls that reduce classes of security risk.
- Provide technical guidance and review to other security practitioners.
Requirements
- 5+ years of professional experience in security engineering, application security, product security, offensive security, or related technical security roles.
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
- Experience independently leading complex security assessments and reviewing technical designs and architectures for systemic risks.
- Advanced threat-modeling and attack-path-analysis experience across complex systems and trust boundaries.
- Strong knowledge of authentication, authorization, identity, least privilege, data protection, isolation, trust boundaries, and sensitive-data handling.
- Significant hands-on experience with security testing, vulnerability research, penetration testing, or adversarial testing.
- Ability to analyze source code, architecture, APIs, configuration, and runtime behavior to identify vulnerabilities.
- Proficiency developing security tooling and automation using Python, Go, or similar languages, including AI-assisted development and automation.
- Strong communication skills and the ability to explain risks, influence technical decisions, and drive remediation across organizational boundaries.
- Preferred: experience assessing AI agents, LLM applications, agentic systems, prompt-injection risks, excessive permissions, tool misuse, insecure integrations, and autonomous behavior.
- Preferred: experience with privacy design reviews, end-to-end data lifecycle analysis, AI-powered security workflows, security knowledge systems, automated-assessment evaluation, and complex cloud or distributed architectures.
- Preferred: experience developing reusable security methodologies and guiding other security engineers or practitioners.
Benefits
- Full-time employees are eligible to participate in a 401(k) plan.
- Employees are eligible for various benefits.
- The posting lists roles based in San Francisco, Seattle, and Sunnyvale.
About Uber
We are Uber. The go-getters. The kind of people who are relentless about our mission to help people go anywhere and get anything and earn their way. Movement is what we power. It’s our lifeblood. It runs through our veins. It’s what gets us out of bed each morning. It pushes us to constantly reimagine how we can move better. For you. For all the places you want to go. For all the things you want to get. For all the ways you want to earn. Across the entire world. In real time. At the incredible speed of now. The idea for Uber was born on a snowy night in Paris in 2008, and ever since then our DNA of reimagination and reinvention carries on. We’ve grown into a global platform powering flexible earnings and the movement of people and things in ever expanding ways. We’ve gone from connecting rides on 4 wheels to 2 wheels to 18-wheel freight deliveries. From takeout meals to daily essentials to prescription drugs to just about anything you need at any time and earning your way. From drivers with background checks to real-time verification, safety is a top priority every single day. At Uber, the pursuit of reimagination is never finished, never stops, and is always just beginning.