Security Architect: AI Threat Modeling & Automation

Uber Technologies Inc.; Seattle (WA); Hybrid; USD 153,000 - 170,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Benefits

Job summary

Uber Technologies Inc. is seeking an experienced security professional to join the Security Review Team in Seattle. You will proactively identify and reduce risk across Uber’s services, conduct hands-on penetration testing, and partner with engineering to drive remediation.

The role emphasizes design reviews, threat modeling, and testing of third-party AI agents. The ideal candidate brings strong security engineering background, practical automation experience, and the ability to translate

Qualifications

• 3+ years of experience in security engineering, application security, product security, offensive security, or related roles.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field, or equivalent practical experience.
• Experience reviewing technical designs and identifying security risks in apps, APIs, cloud services, or distributed systems.
• Experience threat modeling, analyzing attack paths, and recommending mitigations based on risk and impact.
• Understanding of security and privacy principles including authentication, authorization, data protection, and secure handling of sensitive information.
• Hands-on security testing, vulnerability investigation, or validating security controls.
• Experience coding or automating with Python, Go, Bash, or similar; familiarity with AI-assisted workflows.
• Ability to clearly communicate findings to technical and non-technical audiences and collaborate across teams.

Responsibilities

• Conduct security and privacy design reviews for services, applications, APIs, and AI integrations; evaluate data flows and access controls.
• Perform threat modeling for critical services and AI agents; identify attack surfaces and mitigations.
• Test third-party AI agents through hands-on adversarial assessments; assess risks to data access, permissions, and runtime behavior.
• Evaluate how sensitive data is collected, stored, shared, retained, and deleted; collaborate with privacy stakeholders to close gaps.
• Document actionable findings with evidence, test steps, risk assessments, and remediation guidance.
• Partner with engineering and vendors to address findings and verify mitigations.
• Build AI-powered automation to support design reviews, threat modeling, testing, and validation.
• Develop reusable assessment materials like checklists and templates for repeatable assessments.

Skills

Security testing

Threat modeling

Automation mindset

Coding/scripting

Communication

Education

Bachelor's degree in CS/IS/Engineering

Equivalent practical experience

Tools

Python

Go

Bash

AI-assisted tooling

Job description

Uber Technologies Inc. is seeking an experienced security professional to join the Security Review Team in Seattle. You will proactively identify and reduce risk across Uber’s services, conduct hands-on penetration testing, and partner with engineering to drive remediation.

The role emphasizes design reviews, threat modeling, and testing of third-party AI agents. The ideal candidate brings strong security engineering background, practical automation experience, and the ability to translate