Security Review Engineer: AI & Threat Modeling

Ethereum Technologies; Sunnyvale (CA); On-site; USD 165,000 - 248,000; Full time

Job summary

Uber is seeking a contract Security Engineer in Sunnyvale, CA to proactively identify and reduce security and privacy risks across critical services, third-party platforms, and AI technologies.

You will review engineering proposals and ERDs, build automation to scale security assessments, and conduct hands-on adversarial testing of AI agents, partnering with engineering, security, and privacy teams to implement practical design improvements.

Qualifications

• 5+ years of professional security experience, incl. 3+ years in security engineering.
• Experience in security design reviews, threat modeling and privacy risk assessments.
• Hands-on penetration testing and secure software development or scripting.
• Familiarity with AI agent architectures and privacy risks.

Responsibilities

• Conduct ERD security and privacy reviews across apps, APIs, and cloud.
• Perform threat modeling to identify abuse paths and mitigations.
• Assess and test AI agents, including prompt injection and data access.
• Build security automation tools and AI-assisted workflows.
• Conduct targeted penetration testing of critical services and APIs.
• Drive remediation and share practical guidance.

Skills

Security design reviews

Threat modeling

Privacy risk assessments

Penetration testing

Automation of security workflows

AI risk familiarity

Technical communication

Independent cross-team collaboration

Education

Bachelor's or Master's in Computer Science or Cybersecurity

Tools

Scripting (Python/PowerShell)

Job description

Uber is seeking a contract Security Engineer in Sunnyvale, CA to proactively identify and reduce security and privacy risks across critical services, third-party platforms, and AI technologies.

You will review engineering proposals and ERDs, build automation to scale security assessments, and conduct hands-on adversarial testing of AI agents, partnering with engineering, security, and privacy teams to implement practical design improvements.