Uber
Sr Staff Security Engineer - Engineer
$267K–$297K
Seattle, Washington +1 · Senior Staff · Full-time · Posted Oct 28, 2026
- Location
- Seattle, Washington
Sunnyvale, California - Experience
- 10+ years in software engineering, security engineering, or related technical fields.
- Education
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
About the job
Build and operate security platforms, developer tools, and AI-powered systems that protect Uber’s software supply chain and enable continuous offensive testing and AI security assessments.
What you'll do
- Implement supply-chain integrity controls and dependency security, and integrate security analysis and remediation into developer workflows.
- Develop automated penetration testing, vulnerability discovery and validation, and security testing for AI applications and agents.
- Lead technical strategy and production engineering across teams; mentor engineers and measure security outcomes.
What they ask for
- 10+ years of experience in software engineering, security engineering, or related technical fields; advanced proficiency in Go, Java, Python, C++, or a comparable language.
- Experience building large-scale distributed systems, developer platforms, security services, or infrastructure.
- Deep expertise in application security, software supply chain security, or DevSecOps, with experience implementing automated developer-workflow controls.
- Expert-level depth in offensive security engineering, plus ability to lead technical initiatives across teams.
Nice to have
- Experience with SBOMs, software provenance, signing and verification standards or frameworks such as SLSA, Sigstore, in-toto, or OpenSSF.
- Experience building AI-powered security tools or testing agents, LLM applications, MCP servers, and integrations.
Pay
USD $267,000 per year - USD $297,000 per year (base salary, Seattle, WA); USD $267,000 per year - USD $297,000 per year (base salary, Sunnyvale, CA)
Tools
Go, Java, Python, C++, Kubernetes, SLSA, Sigstore, in-toto
AI focus
Use AI models and autonomous agents for security discovery, testing, attack planning, validation, secure coding, and remediation; assess AI applications, agents, LLM integrations, MCP servers, and tools for security risks.
Model-written summary · the original posting is authoritative