Sr Staff Security Engineer - Engineer

Uber; San Francisco (CA); On-site; USD 300,000 - 420,000; Full time

Job summary

Uber seeks a Senior Staff Security Engineer (L6) to lead the architecture and delivery of its next-generation cyber defense platform across multi-cloud environments. You will shape scalable security services, mentor engineers, and drive security into every product lifecycle.

You will lead threat detection, incident response, and policy-driven security posture improvements while collaborating with product, legal, and engineering teams. The role emphasizes innovation and reliability at scale.

Qualifications

• 10+ years in security or software engineering with proven impact.
• Experience leading security projects end-to-end.
• Standards for security/privacy, testing, monitoring.
• Experience with incident management and on-call rotations.
• Bachelor’s degree or equivalent in CS/engineering/math.

Responsibilities

• Set technical direction for cyber defense capabilities across cloud and on-prem.
• Lead platform innovation across CSPM, vulnerability management, and threat response.
• Drive AI/ML powered threat defense and incident response workflows.
• Maintain high availability and scale of security services.
• Lead incident response, root-cause analysis, containment and recovery.
• Collaborate with executives and cross-functional teams to embed security in development.
• Mentor engineers and foster inclusive learning.

Skills

Security engineering

Technical leadership

Threat modeling

Root-cause analysis

Education

Bachelor’s Degree in CS/Engineering

Tools

SIEM

EDR

SOAR

IAM

Job description

About the role and team

Security at Uber is about enabling safe and secure innovation while protecting a global community that spans the digital and physical worlds. As a Senior Staff Security Engineer (L6), you will lead the architecture and implementation of Uber’s next-generation cyber defense platform. This is a high-stakes, high-visibility leadership role where you will be responsible for protecting our global infrastructure, products, and data by building highly available, scalable, and extensible security services.

You represent the top tier of our technical talent, serving as both a visionary architect and a hands-on technical leader in a fast-moving, high-ambiguity environment. You will lead major efforts to design industry-leading solutions for security posture management, threat detection, and incident response, all while incorporating advanced ML and Generative AI frameworks. If you are a humble teacher, an empathic leader, and a world-class engineer motivated by the challenge of staying one step ahead of evolving global threats—this is where you’ll make your mark.

What you’ll do

• Set Technical Direction: Identify high-priority security opportunities and define the long-term architecture for cyber defense capabilities, including cloud security posture management (CSPM), vulnerability management, and threat response.
• Lead Platform Innovation: Design and implement robust, scalable security frameworks leveraging a diverse technology stack (SIEM, EDR, SOAR, IAM) across multi-cloud and hybrid environments (GCP, OCI, AWS, Azure).
• Transform Defense through AI: Lead initiatives to leverage automation and AI/ML, shifting threat defense and incident response from human-driven to software-driven workflows.
• Drive Operational Excellence: Champion best software engineering practices and empower teams to build a culture of quality, ensuring our security systems stand the test of massive scale and high availability.
• Incident Leadership: Participate in high-impact incident response activities, leading investigation, containment, and recovery efforts while performing deep root-cause analysis to prevent future occurrences.
• Collaborate and Influence: Partner with executive leadership and cross-functional teams in Engineering, Product, Legal, and Compliance to integrate security into every stage of the development lifecycle.
• Mentor and Grow: Serve as a role model and technical mentor for senior and junior engineers, fostering an inclusive environment of continuous learning and engineering excellence.

Basic Qualifications

• 10+ years of professional experience in security engineering and/or software engineering, with a proven track record of solving strategically important problems.
• Expert ability to lead area-wide security projects through all stages: idea inception, threat modeling, requirements gathering, and global productionization.
• Demonstrated experience defining organization-wide standards for security/privacy, testing, and monitoring, while leading the adoption of key frameworks.
• Proven track record of foreseeing architectural problems a year out and working with leadership to address them before they impact global operations.
• Advanced expertise in making complex risk tradeoffs (Security vs. Velocity, Buy vs. Build) and managing the short and long-term implications of those decisions.
• Demonstrated skill in technical writing (ERDs, runbooks) and providing technical guidance on code reviews, design reviews, and post-mortems for junior engineers.
• Experience overseeing large-scale incident management by directing on-call rotations and response processes across multiple organizations.
• Education: Bachelor’s Degree or equivalent in Computer Science, Engineering, Mathematics, or a related technical field.

Preferred Qualifications

• Expert-level proficiency in Golang, Python, or Java with the ability to adapt security and privacy controls to new technologies with no prior experience.
• Deep knowledge of Cybersecurity, Compliance, and application security threats, including the ability to chain vulnerabilities and design mitigations.
• Experience partnering with EMs and PMs on headcount planning, recruiting, and technical evaluation of high-performing team members.
• Strategic relationship builder: Proven ability to sustain collaborative relationships across Engineering, Legal, and Finance to create alignment and build trust.
• Serves as a technical brand ambassador, representing Uber to the broader internal and external technical community.