Staff Security Engineer

Uber; Seattle (WA); On-site; USD 229,000 - 254,000; Full time

Job summary

Uber is seeking a Staff Security Engineer to enhance security measures for user-facing products. This role emphasizes the development of advanced threat detection systems, involving collaboration with various teams and expertise in machine learning to adapt to evolving cyber threats.

Qualifications

• 6+ years of professional experience in security engineering.
• Expertise in designing, building, and maintaining detection systems.
• Strong knowledge of threat hunting methodologies and frameworks.

Responsibilities

• Design, develop, and implement software solutions to improve security.
• Analyze security threats and create mitigation strategies.
• Collaborate with cross-functional teams to ensure security approach.

Skills

Security Engineering

Threat Detection

Incident Response

Machine Learning

Scripting

SIEM

Education

Bachelor's degree in Computer Science

Master's degree in Cybersecurity

Tools

Splunk

Elastic

AWS

GCP

Azure

Job description

Join to apply for the Staff Security Engineer role at Uber

2 weeks ago Be among the first 25 applicants

Join to apply for the Staff Security Engineer role at Uber

About The Role

As a Threat Detection Engineer at Uber, you will be at the forefront of safeguarding user-facing products and platforms by leveraging the power of AI and ML. You will drive the development and operations of sophisticated security services and frameworks specifically designed to identify and neutralize evolving threats. Your expertise in analyzing the broadened security landscape, fueled by the adoption of ML/GenAI and extensive heterogeneous data, will be critical in architecting, implementing, and scaling industry-leading threat detection solutions. You will apply your deep understanding of major technology stacks and hands-on experience with machine learning and potentially deep learning to build proactive and reactive security measures. This role involves in-depth threat analysis and vulnerability assessment, directly leading to the development and implementation of cutting-edge detection strategies and mitigation techniques. You will research and experiment with new AI/ML techniques and tools to continuously enhance Uber's cyber defense capabilities. Collaboration with cross-functional teams, including network operations and incident response, will be essential to ensure a cohesive and effective approach to threat detection and response across the organization.

• What the Candidate Will Do
• Design, develop, and implement software solutions to improve organizational security.
• Analyze security threats and vulnerabilities and create detection and mitigation strategies.
• Conduct code reviews and testing.
• Research and evaluate new cybersecurity techniques and tools.
• Collaborate with cross-functional teams (network operations, incident response, compliance) to ensure a unified security approach.
• Basic Qualifications
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field (or equivalent experience).
• 6+ years of professional experience in security engineering, threat detection, or security operations.
• Expertise in designing, building, and maintaining detection systems, including SIEM platforms (e.g., Splunk, Elastic, Sentinel).
• Strong knowledge of threat hunting methodologies, adversary behaviors, and frameworks such as MITRE ATT&CK.
• Advanced ability to write, optimize, and validate detection rules using query languages like KQL, SPL, or Sigma.
• Deep understanding of logs from diverse sources including cloud, network, application, and endpoint telemetry.
• Solid grasp of operating systems (Windows, Linux, macOS), networking concepts, and security controls.
• Demonstrated ability to lead incident investigations and drive root cause analysis across complex environments.
• Preferred Qualifications
• Master's degree in Cybersecurity, Computer Science, or a related field.
• 10+ years of experience in a cybersecurity leadership role, with a focus on detection engineering or threat research.
• Proven experience building or leading large-scale threat detection programs in hybrid or cloud-first environments (AWS, GCP, Azure).
• Proficient in scripting and automation (Python, PowerShell, Bash) to scale detection and response capabilities.
• Experience integrating threat intelligence and creating contextual, high-fidelity detection logic.
• Strong collaboration skills, with a history of working across security, engineering, and product teams to improve security posture.
• Track record of mentoring junior engineers and establishing detection engineering best practices.
• Relevant certifications (e.g., GIAC GCTI, GCED, OSCP, CISSP) are a plus.
• Familiarity with DevOps/DevSecOps environments and CI/CD pipeline security.
  
  

About The Role

As a Threat Detection Engineer at Uber, you will be at the forefront of safeguarding user-facing products and platforms by leveraging the power of AI and ML. You will drive the development and operations of sophisticated security services and frameworks specifically designed to identify and neutralize evolving threats. Your expertise in analyzing the broadened security landscape, fueled by the adoption of ML/GenAI and extensive heterogeneous data, will be critical in architecting, implementing, and scaling industry-leading threat detection solutions. You will apply your deep understanding of major technology stacks and hands-on experience with machine learning and potentially deep learning to build proactive and reactive security measures. This role involves in-depth threat analysis and vulnerability assessment, directly leading to the development and implementation of cutting-edge detection strategies and mitigation techniques. You will research and experiment with new AI/ML techniques and tools to continuously enhance Uber's cyber defense capabilities. Collaboration with cross-functional teams, including network operations and incident response, will be essential to ensure a cohesive and effective approach to threat detection and response across the organization.

• What the Candidate Will Do
• Design, develop, and implement software solutions to improve organizational security.
• Analyze security threats and vulnerabilities and create detection and mitigation strategies.
• Conduct code reviews and testing.
• Research and evaluate new cybersecurity techniques and tools.
• Collaborate with cross-functional teams (network operations, incident response, compliance) to ensure a unified security approach.
• Basic Qualifications
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field (or equivalent experience).
• 6+ years of professional experience in security engineering, threat detection, or security operations.
• Expertise in designing, building, and maintaining detection systems, including SIEM platforms (e.g., Splunk, Elastic, Sentinel).
• Strong knowledge of threat hunting methodologies, adversary behaviors, and frameworks such as MITRE ATT&CK.
• Advanced ability to write, optimize, and validate detection rules using query languages like KQL, SPL, or Sigma.
• Deep understanding of logs from diverse sources including cloud, network, application, and endpoint telemetry.
• Solid grasp of operating systems (Windows, Linux, macOS), networking concepts, and security controls.
• Demonstrated ability to lead incident investigations and drive root cause analysis across complex environments.
• Preferred Qualifications
• Master's degree in Cybersecurity, Computer Science, or a related field.
• 10+ years of experience in a cybersecurity leadership role, with a focus on detection engineering or threat research.
• Proven experience building or leading large-scale threat detection programs in hybrid or cloud-first environments (AWS, GCP, Azure).
• Proficient in scripting and automation (Python, PowerShell, Bash) to scale detection and response capabilities.
• Experience integrating threat intelligence and creating contextual, high-fidelity detection logic.
• Strong collaboration skills, with a history of working across security, engineering, and product teams to improve security posture.
• Track record of mentoring junior engineers and establishing detection engineering best practices.
• Relevant certifications (e.g., GIAC GCTI, GCED, OSCP, CISSP) are a plus.
• Familiarity with DevOps/DevSecOps environments and CI/CD pipeline security.
  
  

Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form .

Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.

For Seattle, WA-based roles: The base salary range for this role is USD$229,000 per year - USD$254,000 per year. For Sunnyvale, CA-based roles: The base salary range for this role is USD$229,000 per year - USD$254,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. You will also be eligible for various benefits. More details can be found at the following link https://www.uber.com/careers/benefits.

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Internet Marketplace Platforms

Referrals increase your chances of interviewing at Uber by 2x

Get notified about new Security Engineer jobs in Seattle, WA.

Security Engineer I, Security Incident Response Team (SIRT)

Bellevue, WA $177,000.00-$251,000.00 2 weeks ago

Seattle, WA $147,000.00-$208,000.00 1 week ago

Seattle, WA $117,000.00-$173,000.00 1 week ago

Bellevue, WA $117,000.00-$173,000.00 2 weeks ago

Senior Security Engineer, Corporate Security

Seattle, WA $148,000.00-$185,000.00 1 week ago

Bellevue, WA $147,000.00-$208,000.00 4 days ago

Seattle, WA $177,000.00-$251,000.00 1 day ago

Bellevue, WA $117,000.00-$173,000.00 1 week ago

Security Engineer II, Security Incident Response Team (SIRT)

Seattle, WA $136,000.00-$212,800.00 1 week ago

Security Engineer, AWS SOC Incident Response

Seattle, WA $136,000.00-$212,800.00 1 week ago

Software Engineer III, Google Cloud Business Platforms

Seattle, WA $141,000.00-$202,000.00 3 days ago

Security Engineer I, Security Incident Response Team (SIRT)

Seattle, WA $152,000.00-$169,000.00 1 week ago

Seattle, WA $150,000.00-$190,000.00 5 months ago

Software Engineer III, Infrastructure, Google Cloud Business Platforms

Seattle, WA $141,000.00-$202,000.00 1 week ago

Security Engineer, Detection Engineering

Seattle, WA $136,000.00-$212,800.00 1 week ago

Bellevue, WA $147,000.00-$208,000.00 2 weeks ago

Security Engineer II, Security Incident Response Team (SIRT)

Seattle, WA $136,000.00-$212,800.00 8 hours ago

Seattle, WA $7,302.00-$11,866.00 6 days ago

Redmond, WA $100,600.00-$215,400.00 2 days ago

Security Engineer, Detection Engineering

Bellevue, WA $136,000.00-$212,800.00 2 weeks ago

Security Engineer II, Security Incident Response Team (SIRT)

Seattle, WA $136,000.00-$212,800.00 1 week ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.