Security Technologist II: AI Security & Automation Lead

Uber; United States; On-site; USD 153,000 - 170,000; Full time

Benefits offered by this job

Bonus program

Equity

401(k)

Job summary

Uber is seeking a senior member of its Security Review Team to proactively identify and reduce risk across Uber’s services and AI systems. You will conduct hands-on penetration testing, security design reviews, and threat modeling, partnering with engineering teams to drive remediation and improvements.

The role emphasizes AI-assisted automation to scale assessments, with a focus on third-party AI agents and privacy protections.

Qualifications

• 5+ years in security engineering or related roles leading complex assessments.
• Ability to review complex designs and architectures for systemic risks.
• Experience with threat modeling across cloud services and APIs.
• Hands-on security testing, vulnerability research, and exploitation validation.
• Proficient in Python/Go for security tooling and automation.

Responsibilities

• Lead security and privacy design reviews across services, APIs, and AI systems.
• Perform threat modeling and identify attack surfaces and mitigations.
• Conduct hands-on adversarial assessments of AI agents and agentic systems.
• Perform code-assisted security reviews and penetration testing.
• Lead end-to-end security assessments from scoping to remediation validation.
• Collaborate with engineering, security, privacy, and third-party vendors to resolve issues.

Skills

Security testing

Threat modeling

Code review

Automation tooling

AI security

Education

Bachelor's degree in CS/Info Security

Tools

Python

Go

Job description

Uber is seeking a senior member of its Security Review Team to proactively identify and reduce risk across Uber’s services and AI systems. You will conduct hands-on penetration testing, security design reviews, and threat modeling, partnering with engineering teams to drive remediation and improvements.

The role emphasizes AI-assisted automation to scale assessments, with a focus on third-party AI agents and privacy protections.