Senior Staff Security Engineer: AI & Supply Chain Defender

Uber; Seattle (WA); On-site; USD 260,000 - 360,000; Full time

Job summary

Uber is seeking a Senior Staff Security Engineer focused on the supply chain, offensive security, and AI security. You will design and build security platforms, developer tooling, and automation to protect Uber's software ecosystem at scale.

This hands-on role requires production-grade coding to secure code, dependencies, and pipelines, plus tooling for automated testing and remediation. You will influence security strategy across Security, Developer Infrastructure, and Engineering, embedding

Qualifications

• 10+ years of production software/ security engineering experience in complex systems.
• Advanced proficiency in Go, Java, Python, or C++ or similar languages.
• Deep understanding of source control, build systems, CI/CD, containers, and cloud-native deployment.

Responsibilities

• Build software supply chain protections: signing, provenance, and secure builds across pipelines.
• Engineer dependency security: SBOMs, vulnerable packages, transitive risks, and automated remediation.
• Deliver scalable security platforms: combine SAST/DAST/ SCA with AI-powered analysis across PRs and CI/CD.
• Turn threat models into engineering controls across applications, APIs, and cloud infra.
• Build offensive security capabilities: automated pentesting, DAST, and exploit validation.
• Develop AI-powered security tools to test AI systems and agents, incl. MCP servers.
• Make findings actionable: prioritize risk and improve coverage and adoption.
• Own production engineering direction: define architectures, APIs, and safety controls.

Skills

Go/Java/Python/C++

Systems architecture

Secure software delivery

Threat modeling

Offensive security

Infrastructure security

Technical ownership

Cross-team collaboration

Education

Bachelor's degree in CS/Engineering or related

Tools

Jfrog Artifactory

Jenkins

GitHub Actions

GitLab CI/CD

Buildkite

CircleCI

Argo CD

SLSA/Sigstore/OpenSSF

Job description

Uber is seeking a Senior Staff Security Engineer focused on the supply chain, offensive security, and AI security. You will design and build security platforms, developer tooling, and automation to protect Uber's software ecosystem at scale.

This hands-on role requires production-grade coding to secure code, dependencies, and pipelines, plus tooling for automated testing and remediation. You will influence security strategy across Security, Developer Infrastructure, and Engineering, embedding