Sr Security Engineer - DDOS and Bot Defense

Uber; Seattle (WA); On-site; USD 202,000 - 224,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Job summary

Uber is seeking a Senior Security Engineer for the Network Security team, focusing on Bot Defense and DDoS Mitigation. You will design and build scalable security systems, processing real-time telemetry to detect automated threats and protect edge and network infrastructure.

You will work with cross-functional teams to enforce security policies, improve threat detection, and ensure resilience at scale in cloud-native environments. Uber offers a bonus program, equity awards, and a 401(k) plan.

Qualifications

• Bachelor's degree in CS, engineering, math, or related field.
• 5+ years of professional full-time experience in software engineering, cybersecurity, or network security.
• Proficiency in Go or Java.
• Deep understanding of TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs, and network segmentation.
• Experience with cloud technologies (AWS, GCP, OCI) and containerization (Docker, Kubernetes).

Responsibilities

• Design, implement, and scale distributed backend systems and real-time algorithms to detect and mitigate automated bot attacks and DDoS threats.
• Leverage real-time streaming frameworks and ML to process network telemetry and identify anomalies.
• Automate and enforce network access controls and edge security configurations using Terraform.
• Improve security visibility, logging, and metrics in cloud-native environments.
• Monitor traffic and security dashboards; respond to incidents and collaborate with engineering teams.
• Drive quality through code reviews, runbooks, and mentoring junior engineers.

Skills

Go

Java

Education

Bachelor’s degree in CS/Engineering/Math or related field

Tools

Terraform

Docker

Kubernetes

Job description

About the Role

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our teams are responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for the Uber Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.

We are seeking a Senior Security Engineer to join our Network Security team, with a primary focus on Bot Defense and DDoS Mitigation. In this role, you will help design, build, and optimize scalable network security systems, algorithms, and automated defense mechanisms to protect our global services against automated threats, volumetric attacks, and malicious bot activity. You will work closely with cross-functional teams to enforce policies, improve real-time threat detection, and maintain system resilience at scale.

What the Candidate Will Do

• Design, implement, and scale distributed backend systems and real-time algorithms to detect, prevent, and mitigate automated bot attacks and volumetric DDoS threats targeting edge and network infrastructure.
• Leverage real-time streaming frameworks and machine learning capabilities to process network telemetry, identify traffic anomalies, and mitigate threats.
• Automate and enforce network access controls, segmentation policies, and edge security configurations using Terraform.
• Improve security visibility, logging, and metrics within container-based and cloud-native environments.
• Monitor network traffic and security dashboards to respond to ongoing security incidents, partner with internal engineering teams on threat resolution, and embed security best practices across services.
• Drive technical quality through rigorous code and design reviews, establish operational runbooks, and mentor junior engineers within the team.

Basic Qualifications

• Bachelor’s Degree or equivalent in Computer Science, Engineering, Mathematics, or a related field.
• 5+ years of professional full-time experience in software engineering, cybersecurity, or network security engineering.
• Proficiency in at least one production programming language: Go, Java.
• Deep understanding of network protocols and concepts, including TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs, and network segmentation.
• Experience with cloud technologies (e.g., AWS, GCP, OCI) and containerization (e.g., Docker, Kubernetes).

Preferred Qualifications

• Direct experience in network security, cybersecurity, bot detection, or DDoS mitigation at scale.
• Hands-on experience incorporating AI/ML models into production systems and working with real-time streaming frameworks (e.g., Apache Flink, Kafka).
• Experience with Secure Access Service Edge (SASE) platforms (e.g., Zscaler).
• Relevant security certifications (e.g., CISSP, CCNP) are a plus.

For Seattle, WA-based roles: The base salary range for this role is USD $202,000 per year - USD $224,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.