Staff Offensive Security Engineer – AI & Automation

Uber; Sunnyvale (CA); On-site; USD 232,000 - 258,000; Full time

Job summary

Uber’s Offensive Security team seeks a senior engineer to perform hands-on penetration testing, security design reviews, threat modeling, and AI-powered automation for scalable security assessments across Uber’s services and AI agents.

You will partner with engineering and security teams to translate findings into systemic improvements, balance design trade-offs, and drive secure outcomes in a fast-moving, hybrid cloud environment.

Qualifications

• 7+ years of professional experience in security engineering, threat detection, or client platform engineering.
• Ability to independently analyze complex, large-scale system designs, identify security risks and attack paths, and drive technical solutions.
• Deep knowledge of threat modeling, vulnerability discovery and classification, security risk assessment, and offensive security methodologies.
• Extensive experience assessing the security of cloud-native services, microservices, distributed systems, APIs, or other large-scale production environments.
• Proven ability to lead complex security assessments and influence engineering teams to implement security improvements.
• Experience applying AI/LLMs, agents, or automation frameworks to security testing, vulnerability discovery, threat modeling, or other security engineering workflows.
• Hands-on experience conducting penetration testing of complex applications, services, APIs, and infrastructure.

Responsibilities

• Perform hands-on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents.
• Conduct security design reviews and threat modeling for AI agents and agentic systems.
• Design and build AI-powered automation for security design reviews, threat modeling, and testing.
• Translate offensive security findings into systemic improvements across Uber’s tech ecosystem.
• Perform multidisciplinary security design reviews of engineering proposals across cloud, infra, and data layers.
• Provide corrective guidance to improve security posture in design trade-offs.
• Collaborate with engineers to identify flaws before production.
• Translate security findings into actionable guidance for engineers and non-technical stakeholders.
• Conduct threat modeling for web and mobile apps to mitigate risks at scale.
• Champion secure engineering practices and act as a security ambassador.

Skills

Threat modeling

Penetration testing

Cloud-native security

Security design reviews

Automation in security testing

AI/LLMs in security

Education

M.S. or PhD in a technical field

10+ years in cybersecurity leadership or staff-level roles

Tools

AI/ML for security

Job description

Uber’s Offensive Security team seeks a senior engineer to perform hands-on penetration testing, security design reviews, threat modeling, and AI-powered automation for scalable security assessments across Uber’s services and AI agents.

You will partner with engineering and security teams to translate findings into systemic improvements, balance design trade-offs, and drive secure outcomes in a fast-moving, hybrid cloud environment.