AI-Driven Security Design & Threat Modeling Engineer

Uber Technologies Inc.; San Francisco (CA); On-site; USD 171,000 - 190,000; Full time

Benefits offered by this job

Bonus program

Equity

401(k) Plan

Benefits package

Job summary

Uber Technologies Inc. is seeking a Security Review Engineer to bolster security across its services and AI agents. You will perform security design reviews, threat modeling, and hands-on testing, with an automation-first mindset to scale offensive security assessments.

You will work in a fast-moving hybrid cloud environment, translating findings into systemic improvements and partnering with engineering to strengthen controls across Uber’s ecosystem. Base US salaries and benefits apply.

Qualifications

• 3+ years of professional experience in security engineering, systems architecture, or related software engineering.
• Ability to analyze complex designs and provide technical input to security challenges with multiple dependencies.
• Broad knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
• Experience with security designs for cloud-native services, microservices, or distributed systems.
• Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.

Responsibilities

• Conduct security design reviews and threat modeling across Uber’s diverse codebase, evaluating security risks in services, applications, APIs, infrastructure, mobile platforms, AI systems, and other production software.
• Assess third-party AI agents, including coding and work-focused agents, through adversarial testing to identify security risks in agent behavior, tool use, data access, permissions, prompt injection, and external integrations.
• Perform hands-on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents to identify exploitable vulnerabilities and complex attack paths.
• Design and build AI-powered automation for security design reviews, threat modeling, penetration testing, increasing the scale, frequency, and depth of Offensive Security assessments.
• Partner with engineering and security teams to translate offensive security findings into systemic improvements, helping eliminate vulnerability classes and strengthen security controls across Uber’s technology ecosystem.
• Perform multi-disciplinary security design reviews of engineering proposals, analyzing cloud, infrastructure, application, and data-layer security.
• Navigate complex design trade-offs to provide corrective guidance that improves the overall security posture of Uber’s products and services.
• Collaborate with engineering teams across the company to analyze design documents and identify potential flaws before they reach production.
• Translate technical security findings into actionable guidance for both engineering and non-technical stakeholders to ensure alignment and impact.
• Conduct comprehensive security assessments, including threat modeling for web and mobile applications, to identify and mitigate risks at scale.
• Champion engineering best practices and serve as a security ambassador, helping teams move fast while building with integrity and care.

Skills

Threat modeling

Security design reviews

Penetration testing

Cloud-native security

Multi-cloud (AWS, GCP)

Go/Java/Python

Automation for security

Secure Software Development Lifecycle

Adversarial testing

Education

Bachelor's degree in Computer Science or Engineering

Tools

AWS

GCP

CI/CD pipelines

Kubernetes

SQL/NoSQL databases

Job description

Uber Technologies Inc. is seeking a Security Review Engineer to bolster security across its services and AI agents. You will perform security design reviews, threat modeling, and hands-on testing, with an automation-first mindset to scale offensive security assessments.

You will work in a fast-moving hybrid cloud environment, translating findings into systemic improvements and partnering with engineering to strengthen controls across Uber’s ecosystem. Base US salaries and benefits apply.