Software Engineer II - Security Review Automation

Uber; Seattle (WA, CA); On-site; USD 171,000 - 190,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Comprehensive benefits

Job summary

Uber is seeking an experienced software engineer for its Offensive Security team in the US. You will build platforms and automation for SAST, DAST, SCA, and AI-driven security testing, delivering scalable solutions that integrate with CI/CD and source control.Expect collaboration across Product, Data Science, and Ops to shape robust security workflows.

The role emphasizes ownership, systems thinking, and rigorous monitoring, with opportunities to apply frontier AI models to real-world security

Qualifications

• 3+ years of professional software engineering experience in backend development, distributed systems, or data engineering.
• Proficiency in one or more programming languages (Go, Java, Python, or C++).
• Bachelor's Degree (or equivalent) in Computer Science, Engineering, or related field.
• Experience writing tests and establishing monitoring systems.
• Experience building APIs, service integrations, or automated workflows.
• Understanding of secure software development fundamentals.
• Familiarity with source control, CI/CD, and automated testing practices.

Responsibilities

• Build software platforms and automation across SAST, DAST, SCA, penetration testing, AI red teaming, and threat modeling.
• Develop AI-powered agents and workflows to analyze code, orchestrate assessments, generate test cases, and validate findings.
• Partner with security engineers to translate expertise into repeatable, scalable capabilities.
• Build and scale foundational infrastructure and data pipelines with attention to long-term impact.
• Integrate security capabilities with source control, CI/CD, inventories, and issue-tracking systems.
• Create shared services for orchestration, findings normalization, and remediation tracking.
• Design, develop, and maintain high-quality code for moderately complex features with multiple dependencies.
• Develop evaluation frameworks and safeguards for AI-driven workflows with auditability and access controls.
• Own the software lifecycle end-to-end from design documents to production incident debugging.

Skills

Backend development

Distributed systems

Data engineering

Go / Java / Python / C++

Education

Bachelor's Degree in Computer Science, Engineering, or related field

Tools

Spark

Flink

Kafka

Job description

About the role and team

As a member of the company's Offensive Security team, you will build the security tools, platforms, and AI-powered automation that enable security testing and risk reduction at the company scale. You will develop software that automates and enhances security processes including security design reviews, threat modeling, penetration testing, vulnerability discovery and validation, and AI agent security testing. This role combines strong software engineering with an automation-first mindset, applying AI and frontier models to transform traditionally manual security processes into continuous, scalable capabilities integrated across the company's technology ecosystem.

The problems here are messy and the systems are global. You'll need to make smart decisions with imperfect information, own your work end-to-end, and stay calm when high-load systems are on the line. We are looking for engineers who think in systems, pride themselves on robust monitoring, and believe that the best solutions are built through candid feedback and cross-functional collaboration. If you're energized by challenges and motivated to move the real world - this is where you'll grow.

What you'll do

• Build software platforms and automation across static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), penetration testing, AI red teaming, security design reviews, and threat modeling.
• Develop AI-powered agents and workflows that analyze source code and technical designs, orchestrate security assessments, generate test cases, and validate findings.
• Partner with security engineers to translate their expertise into repeatable, scalable capabilities.
• Build and scale foundational infrastructure and data pipelines, balancing technical debt and shifting priorities while keeping long-term impact in mind.
• Integrate security capabilities with source control, CI/CD pipelines, service inventories, and issue-tracking systems to enable continuous and on-demand testing throughout the software development lifecycle.
• Build shared services for assessment orchestration, findings normalization and deduplication, and remediation tracking, reducing duplicate findings and manual work for security and engineering teams.
• Design, develop, and maintain high-quality code for features of moderate complexity and projects with multiple dependencies.
• Develop evaluation frameworks and operational safeguards for AI-driven security workflows, measuring accuracy, coverage, latency, and cost while enforcing appropriate access controls, execution boundaries, and auditability.
• Own the software lifecycle end-to-end, from drafting design docs to debugging production issues and managing incidents independently.
• Collaborate across disciplines - including Product, Data Science, and Ops - to translate ambiguous requirements into simple, elegant system designs.
• Champion engineering best practices by providing quality code reviews, creating comprehensive tests, and improving system performance.
• Navigate internal complexity and stakeholder inquiries to unblock dependencies and ensure the reliability of our production environment.

Basic Qualifications

• 3+ years of professional software engineering experience in backend development, distributed systems, or data engineering.
• Proficiency in one or more object-oriented or functional programming languages (e.g., Go, Java, Python, or C++).
• Experience with data modeling, query optimization, and translating customer problems into system design.
• Bachelor's Degree (or equivalent experience) in Computer Science, Engineering, or a related technical field.
• Experience writing tests to verify functionality and establishing monitoring systems to ensure code stability.
• Experience building APIs, service integrations, or automated workflows that connect multiple systems in production environments.
• Understanding of secure software development fundamentals, including authentication, authorization, data protection, and safe handling of credentials.
• Familiarity with source control, CI/CD, and automated testing practices for delivering reliable software.

Preferred Qualifications

• Experience building agentic security workflows that autonomously gather technical context, reason across multiple data sources, invoke security tools, validate conclusions, and produce evidence-backed security assessments.
• Experience applying frontier LLMs to complex security reasoning, including architecture analysis, attack-path identification, threat enumeration, vulnerability discovery, and security control validation.
• Experience developing multi-agent or multi-model architectures that use specialized agents, model routing, or model-as-judge techniques to improve the accuracy, coverage, and confidence of automated security reviews.
• Experience identifying and reducing code-level technical debt in high-load distributed systems.
• Background in mentoring new team members and contributing to engineering culture.
• Proficiency with Big Data frameworks (e.g., Spark, Flink) or real-time data streaming (e.g., Kafka).
• Demonstrated ability to exercise sound judgment on engineering trade-offs for complex systems.
• Experience building security tools or automation in one or more of the following domains: SAST, DAST, SCA, penetration testing, AI red teaming, security design reviews, or threat modeling.
• Experience developing LLM-powered applications or agentic workflows, including model integration, tool execution, context retrieval, and orchestration.
• Experience building evaluation frameworks for AI-driven systems, including reproducible benchmarks, regression testing, and measurement of output quality and reliability.
• Familiarity with source-code analysis, dependency graphs, API testing, or isolated execution environments for automated security testing.
• Experience using AI-assisted development tools to accelerate software implementation, testing, debugging, and maintenance.
• features.

For Seattle, WA-based roles: The base salary range for this role is USD $171,000 per year - USD $190,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD $171,000 per year - USD $190,000 per year.

For all US locations, you will be eligible to participate in the company's bonus program, and may be offered an equity award & other types of comp.

All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

Offices remain key to collaboration and the company's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.

the company is proud to be an Equal Opportunity employer.

All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

If you have a disability or special need that requires accommodation, please let us know by completing this form.