Staff Security Engineer - AI-Driven RBVM & Scale Platform

Uber; United States; On-site; USD 232,000 - 258,000; Full time

Benefits offered by this job

Bonus program

Equity

401(k) plan

Benefits

Job summary

Uber is seeking a Staff Security Engineer, Vulnerability Management to architect and scale our Risk-Based Vulnerability Management (RBVM) systems across on-prem, cloud, containers, VMs, and endpoints. You will lead the transition toward Continuous Threat Exposure Management and AI-driven remediation workflows at enterprise scale.

You will mentor engineers, drive security posture improvements, and collaborate across IT, security, product, and operations to mature governance, standards, and

Qualifications

• 7+ years of industry experience in software development with a focus on large-scale security or infrastructure engineering.
• Expertise in building distributed systems and high-availability security platforms.
• Proven track record of designing and operating vulnerability management tools at scale.
• Deep understanding of container security, cloud-native infrastructure, and CI/CD pipelines.
• Experience leading cross-functional security initiatives and mentoring senior engineering staff.

Responsibilities

• RBVM Platform Architecture: Design and scale Security Posture Management tools and platforms to provide a unified, risk-scored view of vulnerabilities across on-prem, cloud, containers, VMs, and endpoints.
• Automation & Orchestration: Build automated remediation workflows and systems that will reduce median response times for emerging threats and scale across decentralized teams.
• Technical Strategy: Lead Shift-Left initiatives by integrating vulnerability scanning into development workflows, CI/CD pipelines, and infrastructure provisioning to enforce security policies.
• AI/ML Innovation: Leverage LLMs and AI agents for automated triage, impact analysis, and remediation instructions for service owners.
• Vulnerability Governance: Partner with Compliance and IT to mature vulnerability standards, SLAs, and risk exception processes across the global estate.
• Vulnerability Analysis: Provide deep security SME to analyze complex vulnerabilities and drive remediation decisions.

Skills

Golang

Java

Python

Security design

Vulnerability management

CI/CD pipelines

Job description

Uber is seeking a Staff Security Engineer, Vulnerability Management to architect and scale our Risk-Based Vulnerability Management (RBVM) systems across on-prem, cloud, containers, VMs, and endpoints. You will lead the transition toward Continuous Threat Exposure Management and AI-driven remediation workflows at enterprise scale.

You will mentor engineers, drive security posture improvements, and collaborate across IT, security, product, and operations to mature governance, standards, and