Security Design & Threat Modeling Engineer (AI & Automation)

Uber Technologies Inc.; Sunnyvale (CA); On-site; USD 171,000 - 190,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Job summary

Uber Technologies Inc. is seeking a Security Review Engineer to perform security design reviews, threat modeling, and hands-on penetration testing across Uber’s services and AI agents.

The role emphasizes building AI-powered automation to scale security assessments within a fast-moving hybrid cloud environment. The candidate will collaborate with engineering teams, translate findings into systemic improvements, and influence security posture across Uber’s technology ecosystem.

Qualifications

• 3+ years of professional experience in security engineering, systems architecture, or a related software engineering field.
• Proven ability to analyze complex system designs and provide technical input to solve security challenges with multiple dependencies.
• Broad knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.

Responsibilities

• Conduct security design reviews and threat modeling across Uber’s diverse codebase, evaluating security risks in services, applications, APIs, infrastructure, mobile platforms, AI systems, and other production software.
• Assess third-party AI agents, including coding and work-focused agents, through adversarial testing to identify security risks in agent behavior, tool use, data access, permissions, prompt injection, and external integrations.
• Perform hands-on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents to identify exploitable vulnerabilities and complex attack paths
• Design and build AI-powered automation for security design reviews, threat modeling, penetration testing, increasing the scale, frequency, and depth of Offensive Security assessments.
• Partner with engineering and security teams to translate offensive security findings into systemic improvements, helping eliminate vulnerability classes and strengthen security controls across Uber’s technology ecosystem.
• Perform multi-disciplinary security design reviews of engineering proposals, analyzing cloud, infrastructure, application, and data-layer security.
• Navigate complex design trade-offs to provide corrective guidance that improves the overall security posture of Uber’s products and services.
• Collaborate with engineering teams across the company to analyze design documents and identify potential flaws before they reach production.
• Translate technical security findings into actionable guidance for both engineering and non-technical stakeholders to ensure alignment and impact.
• Conduct comprehensive security assessments, including threat modeling for web and mobile applications, to identify and mitigate risks at scale.
• Champion engineering best practices and serve as a security ambassador, helping teams move fast while building with integrity and care.

Skills

Threat modeling

Security design reviews

Penetration testing

Automation & CI/CD

Cloud & distributed systems

Go/Java/Python

Education

Bachelor's degree in CS/Engineering

Tools

AWS

GCP

Kubernetes

Job description

Uber Technologies Inc. is seeking a Security Review Engineer to perform security design reviews, threat modeling, and hands-on penetration testing across Uber’s services and AI agents.

The role emphasizes building AI-powered automation to scale security assessments within a fast-moving hybrid cloud environment. The candidate will collaborate with engineering teams, translate findings into systemic improvements, and influence security posture across Uber’s technology ecosystem.