Drimva

Uber

Security Technologist II - Design Review

$153K–$170K

Seattle, Washington · Full-time · Posted Oct 13, 2026

Experience
3+ years; no alternative stated.
Education
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.

About the job

Conduct security and privacy reviews, threat modeling, and hands-on adversarial testing of services and third-party AI agents, while building automation to scale security assessments.

What you'll do

  • Review designs and data flows, model threats, and test third-party AI agents for attack paths and sensitive-data exposure.
  • Document findings and work with engineering teams and vendors to remediate and validate risks.
  • Build AI-powered security automation and reusable assessment materials.

What they ask for

  • 3+ years in security engineering, application security, product security, offensive security, or a related technical security role.
  • Experience reviewing technical designs, performing threat modeling, and hands-on security testing or vulnerability investigation.
  • Understanding of security and privacy principles, including authentication, authorization, least privilege, and sensitive-data protection.
  • Bachelor’s degree in a related technical field or equivalent practical experience; coding or automation experience and familiarity with AI-assisted development workflows.

Nice to have

  • Experience assessing third-party AI agents or LLM applications, including AI-specific risks such as prompt injection and unsafe tool use.
  • Experience with privacy design reviews, security tooling, or assessments across cloud services and third-party integrations.

Pay

USD $153,000 per year - USD $170,000 per year (base salary)

Tools

Python, Go, Bash

AI focus

Assess third-party AI agents for security and privacy risks, and build AI-powered automation for design reviews, threat modeling, agent testing, and vulnerability validation.

Model-written summary · the original posting is authoritative

First seen Oct 15, 2026 · Last verified Nov 5, 2026 (UTC)