Staff Security Engineer: AI-Driven Offensive Security

Uber; San Francisco (CA); On-site; USD 232,000 - 258,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

Benefits

Job summary

Uber is seeking an experienced security engineer to join the Offensive Security team in San Francisco. You will perform hands-on pentesting, security design reviews, and threat modeling for critical services and AI agents, ensuring secure development across hybrid cloud environments.

The role emphasizes automation, scalable security testing, and collaboration with engineering teams to turn findings into systemic security improvements.

Qualifications

• 7+ years of professional experience in security engineering, threat detection, or client platform engineering.
• Deep knowledge of threat modeling, vulnerability discovery and classification, security risk assessment, and offensive security methodologies.
• Experience applying them to complex production environments.
• Extensive experience assessing the security of cloud-native services, microservices, distributed systems, APIs, or other large-scale production environments.
• Proven ability to lead complex security assessments and influence engineering teams to implement security improvements across organizational and technical boundaries.
• Experience applying AI/LLMs, agents, or automation frameworks to security testing, vulnerability discovery, threat modeling, or other security engineering workflows.
• Hands-on experience conducting penetration testing of complex applications, services, APIs, and infrastructure.

Responsibilities

• Perform hands-on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents to identify exploitable vulnerabilities and complex attack paths.
• Conduct security design reviews and threat modeling for AI agents and agentic systems, evaluating risks across models, tools, data, permissions, external integrations, and runtime behavior.
• Design and build AI-powered automation for security design reviews, threat modeling, penetration testing, and vulnerability validation, increasing the scale, frequency, and depth of Offensive Security assessments.
• Partner with engineering and security teams to translate offensive security findings into systemic improvements, helping eliminate vulnerability classes and strengthen security controls across Uber's technology ecosystem.
• Perform multi-disciplinary security design reviews of engineering proposals, analyzing cloud, infrastructure, application, and data-layer security.
• Navigate complex design trade-offs to provide corrective guidance that improves the overall security posture of Uber's products and services.
• Collaborate with engineering teams across the company to analyze design documents and identify potential flaws before they reach production.
• Translate technical security findings into actionable guidance for both engineering and non-technical stakeholders to ensure alignment and impact.
• Conduct comprehensive security assessments, including threat modeling for web and mobile applications, to identify and mitigate risks at scale.
• Champion engineering best practices and serve as a security ambassador, helping teams move fast while building with integrity and care.

Skills

Threat modeling

Vulnerability discovery

Offensive security

Penetration testing

AI/LLMs automation

Security design reviews

Education

Master's degree or PhD in a technical field

Job description

Uber is seeking an experienced security engineer to join the Offensive Security team in San Francisco. You will perform hands-on pentesting, security design reviews, and threat modeling for critical services and AI agents, ensuring secure development across hybrid cloud environments.

The role emphasizes automation, scalable security testing, and collaboration with engineering teams to turn findings into systemic security improvements.