Security Review Lead: AI, Threat Modeling & Automation

Uber Technologies Inc.; Sunnyvale (CA); On-site; USD 153,000 - 170,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Benefits

Job summary

Uber Technologies Inc. is seeking a highly skilled security engineer to lead design reviews, threat modeling, and hands-on assessments of AI agents and third-party integrations.

You will drive remediation with engineering teams, develop AI-powered automation for security testing, and elevate security across Uber’s AI-enabled services. The ideal candidate brings 5+ years in security engineering, strong threat modeling skills, and a track record of scalable security tooling using Python or Go.

Qualifications

• 5+ years of professional experience in security engineering or offensive security roles.
• Ability to review complex designs, identify systemic risks, and guide remediation across services.
• Strong threat modeling and attack-path analysis across complex systems.
• Proficiency with Python, Go, or similar for security tooling and automation.

Responsibilities

• Lead design reviews across services, APIs, and AI systems to identify systemic risks.
• Conduct threat modeling and identify attack paths, guiding mitigations with engineering teams.
• Perform hands-on adversarial assessments of AI agents and third-party integrations to test security controls.
• Develop AI-powered automation to scale security reviews and testing workflows.

Skills

Threat Modeling

Penetration Testing

Python

Go

Security Automation

Cloud Security

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Kubernetes

Job description

Uber Technologies Inc. is seeking a highly skilled security engineer to lead design reviews, threat modeling, and hands-on assessments of AI agents and third-party integrations.

You will drive remediation with engineering teams, develop AI-powered automation for security testing, and elevate security across Uber’s AI-enabled services. The ideal candidate brings 5+ years in security engineering, strong threat modeling skills, and a track record of scalable security tooling using Python or Go.