Senior Offensive Security Engineer - AI & Automation

Uber; Sunnyvale (CA); On-site; USD 232,000 - 258,000; Full time

Benefits offered by this job

Bonus program

Equity awards

401(k) plan

Job summary

Uber’s Offensive Security team seeks an engineer to perform hands-on testing, design reviews, and threat modeling across AI agents and distributed systems. You will help build AI-powered security automation and translate findings into actionable improvements for engineers and product teams.

The role requires deep expertise in offensive security, cloud-native environments, and innovative risk reduction strategies, with a hands-on, ownership-driven mindset.

Qualifications

• 7+ years in security engineering, threat detection, or client platform engineering.
• Ability to analyze large-scale system designs and drive security solutions across services.
• Deep knowledge of threat modeling, vulnerability discovery, risk assessment, and offensive security techniques.

Responsibilities

• Perform hands-on penetration testing of Uber services, APIs, and AI agents to identify vulnerabilities.
• Conduct security design reviews and threat modeling for AI agents and systems.
• Design and build AI-powered automation for security assessments and vulnerability validation.
• Translate offensive security findings into systemic security improvements across Uber's ecosystem.
• Collaborate with engineering teams to analyze designs and identify security flaws before production.

Skills

Security engineering

Threat modeling

Penetration testing

Cloud-native security

Automation in security

Vulnerability discovery

Education

Master's or PhD in technical field

Cybersecurity leadership/staff-level experience

Knowledge of cybersecurity, compliance, privacy

Collaboration with EMs, TPMs, PMs

AI/ML for security use cases

Job description

Uber’s Offensive Security team seeks an engineer to perform hands-on testing, design reviews, and threat modeling across AI agents and distributed systems. You will help build AI-powered security automation and translate findings into actionable improvements for engineers and product teams.

The role requires deep expertise in offensive security, cloud-native environments, and innovative risk reduction strategies, with a hands-on, ownership-driven mindset.