Software Engineer II - Risk & Compliance

Uber; Seattle (WA); On-site; USD 171,000 - 190,000; Full time

Benefits offered by this job

Bonus program

Equity awards

401(k) plan

In-office collaboration

Job summary

Uber seeks a Software Engineer II on the Security team to design and scale core services and data pipelines that support security baselines and compliance across systems used by millions. You will own initiatives end-to-end, collaborate across Security, Legal, and Infrastructure, and promote secure coding practices.

Applicants should have 3+ years in backend or distributed systems, strong coding skills in Go/Java/Python/C++, and a Bachelor’s in CS or related field.

Qualifications

• 3+ years of professional software engineering experience.
• Experience with backend development or distributed systems.
• Experience writing tests and establishing monitoring systems.

Responsibilities

• Design, develop, and maintain core services and security baselines across internal systems.
• Build and scale security data pipelines for audit logs and telemetry.
• Own compliance and risk initiatives end-to-end from architecture to incident response.
• Collaborate with Security, Legal, Compliance, and Core Infrastructure teams on regulatory requirements.
• Champion secure coding standards and expand automated testing and monitoring.
• Streamline evidence collection and audit workflows to minimize friction for engineers.

Skills

Go/Java/Python/C++

Education

Bachelor's degree in CS/Engineering

Job description

About The Role And Team

Engineering at Uber means building for real-world impact under real-world constraints. As a Software Engineer II on our Security team, you will architect the foundational infrastructure that powers business decisions and core services for millions of users. Whether you are scaling distributed storage platforms or building high-performance data pipelines, you will be solving complex challenges at the intersection of low latency, high correctness, and massive scale.

The problems here are messy and the systems are global. You’ll need to make smart decisions with imperfect information, own your work end-to-end, and stay calm when high-load systems are on the line. We are looking for engineers who think in systems, pride themselves on robust monitoring, and believe that the best solutions are built through candid feedback and cross-functional collaboration. If you’re energized by challenges and motivated to move the real world - this is where you’ll grow.

What You’ll Do

• Design, develop, and maintain core services and features that automate continuous compliance monitoring, risk assessments, and security baseline controls across internal systems.
• Build and scale security data pipelines and infrastructure to process audit logs, telemetry, and vulnerability signals, balancing technical debt with long-term platform scalability.
• Own compliance and risk engineering initiatives end-to-end, from drafting architectural design docs to resolving production security incidents and mitigating system vulnerabilities.
• Collaborate cross-functionally with Security, Legal, Compliance, and Core Infrastructure teams to translate complex regulatory requirements and security policies into simple, developer-friendly automation.
• Champion secure coding standards and engineering best practices by conducting thorough code reviews, expanding automated integration/compliance testing, and improving system resilience.
• Streamline evidence collection and audit workflows to minimize friction for internal engineering teams while ensuring our production environment strictly adheres to compliance benchmarks

Basic Qualifications

• 3+ years of professional software engineering experience in backend development, distributed systems, or data engineering.
• Proficiency in one or more object-oriented or functional programming languages (e.g., Go, Java, Python, or C++).
• Experience with data modeling, query optimization, and translating customer problems into system design.
• Bachelor’s Degree (or equivalent experience) in Computer Science, Engineering, or a related technical field.
• Experience writing tests to verify functionality and establishing monitoring systems to ensure code stability.

Preferred Qualifications

• Domain Experience: Prior experience building or maintaining systems within security, risk, or compliance domains (e.g., audit logging, identity/access management, continuous compliance monitoring, or GRC automation).
• Security & Compliance Frameworks: Familiarity with industry security standards and compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF, or PCI-DSS) and translating policy into technical safeguards.
• Big Data & Telemetry Pipelines: Proficiency with data processing frameworks (e.g., Spark, Flink) or streaming platforms (e.g., Kafka) used for real-time audit logging, security telemetry, or anomaly detection.
• Policy & Infrastructure Automation: Exposure to Policy-as-Code tooling (e.g., Open Policy Agent/Rego) or automated security control validation in cloud environments (AWS, GCP, or Azure).
• Engineering Culture & Trade-Offs: Track record of mentoring junior team members, contributing to a security-first culture, and making sound trade-offs between delivery velocity and security/compliance posture.

For Seattle, WA-based roles: The base salary range for this role is USD $171,000 per year - USD $190,000 per year.

• You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp.
• All full-time employees are eligible to participate in a 401(k) plan.
• You will also be eligible for various benefits.
• You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits.

Ready to Ride?

This isn't the kind of place where you follow a playbook — it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves — we'd love to hear from you.

Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.