Uber
Staff Security Engineer
$232K–$258K
San Francisco, California +2 · Staff · Full-time · Posted Sep 24, 2026
- Location
- San Francisco, California
Seattle, Washington
Sunnyvale, California - Experience
- 7+ years required; preferred qualification states a Master’s degree or PhD in a technical field and 10+ years of experience in a cybersecurity leadership or staff-level role.
- Education
- Preferred: Master’s degree or PhD in a technical field.
About the job
Lead offensive security assessments across Uber’s services and emerging technologies, while building AI-powered automation to make security testing more continuous and scalable.
What you'll do
- Penetration-test services, applications, APIs, infrastructure, and AI agents; validate vulnerabilities and attack paths.
- Conduct security design reviews and threat modeling, including for AI agents and agentic systems.
- Build AI-powered security assessment automation and partner with teams to improve security controls.
What they ask for
- 7+ years of professional experience in security engineering, threat detection, or client platform engineering.
- Deep knowledge of threat modeling, vulnerability discovery and classification, security risk assessment, and offensive security methodologies.
- Experience assessing cloud-native services, microservices, distributed systems, APIs, or other large-scale production environments.
- Hands-on penetration testing experience and experience applying AI/LLMs, agents, or automation frameworks to security workflows.
Nice to have
- Master’s degree or PhD in a technical field and 10+ years of experience in a cybersecurity leadership or staff-level role.
- Experience with cybersecurity compliance and privacy, AI/ML security, or building device attestation or trust tooling at global scale.
Pay
USD $232,000 per year - USD $258,000 per year (base salary)
Tools
AI/LLMs, APIs, cloud-native services, microservices, distributed systems
AI focus
Apply AI/LLMs, agents, and automation frameworks to security testing, vulnerability discovery, threat modeling, and security engineering workflows; build AI-powered automation for security assessments and evaluate AI agents and agentic systems.
Model-written summary · the original posting is authoritative