Staff Offensive Security Engineer — AI-Driven Security

Uber; Sunnyvale (CA); Hybrid; USD 232,000 - 258,000; Full time

Job summary

Uber's Offensive Security team seeks a seasoned security engineer to perform hands-on penetration testing, threat modeling, and security design reviews for critical services and AI agents, with an automation-first mindset.

You will collaborate across engineering and security to translate findings into systemic improvements while balancing speed and security in a fast-moving, hybrid cloud environment.

Qualifications

• 7+ years in security engineering or related areas.
• Ability to analyze complex designs and drive solutions.
• Expertise in threat modeling, vulnerability discovery, and risk assessment.
• Experience securing cloud-native services and APIs.
• Leader in security assessments across teams and systems.
• Experience applying AI/LLMs or automation to security workflows.
• Hands-on testing of complex applications and infrastructure.

Responsibilities

• Perform hands-on penetration testing of Uber services, APIs, and infrastructure.
• Conduct security design reviews and threat modeling for AI agents.
• Build AI-powered automation for security testing at scale.
• Translate findings into systemic security improvements with engineering teams.
• Review engineering proposals for cloud, infra, app, and data security.
• Provide actionable guidance to engineers and non-technical stakeholders.
• Lead security assessments and help strengthen controls across Uber.

Skills

Threat modeling

Penetration testing

Security design reviews

Automation in security

AI/ML in security

Cloud security

Security assessments

Education

Master's or PhD in technical field

Job description

Uber's Offensive Security team seeks a seasoned security engineer to perform hands-on penetration testing, threat modeling, and security design reviews for critical services and AI agents, with an automation-first mindset.

You will collaborate across engineering and security to translate findings into systemic improvements while balancing speed and security in a fast-moving, hybrid cloud environment.