Security Design & Threat Modeling Engineer II

Uber Technologies Inc.; Seattle (WA); On-site; USD 171,000 - 209,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Job summary

Uber Technologies Inc. is seeking a Security Review Team member to proactively identify and reduce risk across Uber’s services, AI initiatives, and hybrid cloud environment.

You will conduct security design reviews, threat modeling, and hands‑on testing to validate real‑world attack paths and build AI‑powered automation for scalable security assessments. The role emphasizes ownership, ambiguity handling, and cross‑team collaboration.

Qualifications

• 3+ years of professional security engineering, systems architecture, or related software engineering.
• Ability to analyze complex system designs and provide technical input across dependencies.
• Broad knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
• Experience with security designs related to cloud-native services, microservices, or distributed systems.
• Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.

Responsibilities

• Conduct security design reviews and threat modeling across Uber’s diverse codebase, evaluating security risks in services, applications, APIs, infrastructure, mobile platforms, AI systems, and other production software.
• Assess third‑party AI agents for security risks in agent behavior, tool use, data access, permissions, prompt injection, and external integrations.
• Perform hands‑on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents to identify exploitable vulnerabilities and complex attack paths.
• Design and build AI‑powered automation for security design reviews, threat modeling, and penetration testing to scale assessments.
• Partner with engineering and security teams to translate offensive security findings into systemic improvements and stronger controls.
• Translate technical security findings into actionable guidance for engineering and non‑technical stakeholders to ensure alignment and impact.

Skills

Backend language proficiency

Systems thinking

Threat modeling

Security design reviews

Education

Bachelor's degree in Computer Science or engineering

Tools

AWS

GCP

Job description

Uber Technologies Inc. is seeking a Security Review Team member to proactively identify and reduce risk across Uber’s services, AI initiatives, and hybrid cloud environment.

You will conduct security design reviews, threat modeling, and hands‑on testing to validate real‑world attack paths and build AI‑powered automation for scalable security assessments. The role emphasizes ownership, ambiguity handling, and cross‑team collaboration.