Staff Security Engineer – Detection & Response (AI-Driven Threat Hunting & Incident Response)

Uber; Seattle (WA); On-site; USD 232,000 - 258,000; Full time

Benefits offered by this job

Bonus program

Equity grant

401(k) plan

Comprehensive benefits

Job summary

Uber is seeking a Staff Security Engineer to join the Cyber Defense team in Seattle to drive incident response and threat hunting capabilities powered by AI/ML/GenAI. You will architect scalable security solutions and mentor engineers while delivering complex projects.

You will architect autonomous investigation agents and AI-driven threat hunting platforms to defend Uber at machine speed, while collaborating across IT, product, and security teams to strengthen Uber's security posture.

Qualifications

• BS/MS in CS, engineering, or related field.
• 7+ years in software development or security engineering.
• Proficient in Golang, Java, or Python.
• Experience with incident response and threat hunting.
• Strong understanding of distributed systems and high-performance design.

Responsibilities

• Architect autonomous security agents for end-to-end incident response.
• Lead AI-driven threat hunting across cloud, host, network, and application telemetry.
• Build tooling and data pipelines for investigations and forensics.
• Collaborate with detection engineers to improve signals and tooling.
• Provide technical leadership and set project direction.

Skills

Golang

Java

Python

Distributed systems

Incident response

Threat hunting

Education

BS/MS in CS or related field

Master’s Degree or PhD (preferred)

Tools

CrowdStrike

Splunk

Chronicle

Job description

About the Role

Our mission is to protect, defend, and secure Uber’s products, infrastructure, and data by building highly available, scalable, and extensible security solutions and services. We are seeking a Staff Security Engineer to join the Cyber Defense team to drive the development of our next-generation incident response and threat hunting capabilities, powered by AI/ML/GenAI. In this role, you will be a passionate and pragmatic technologist, designing scalable systems while delivering high-quality code.

You will architect and implement industry-leading response solutions, including autonomous investigation agents and AI-driven threat hunting platforms, to defend Uber at machine speed against sophisticated, AI-driven adversaries. As a Staff Engineer, you are not only a technical role model but also an empathic leader and humble teacher, mentoring a team of passionate engineers while delivering uniquely challenging projects.

—- What the Candidate Will Do —-

• Agentic Incident Response: Architect and build autonomous security agents that investigate, triage, contain, and remediate incidents end-to-end, achieving response at machine speed and dramatically reducing mean-time-to-respond.
• AI-Driven Threat Hunting: Design and lead proactive, hypothesis-driven hunting campaigns across cloud, host, network, and application telemetry, and build the platforms and agents that scale hunting from manual expeditions to continuous, automated pursuit of adversaries.
• Investigation & Forensics at Scale: Build the tooling and data pipelines that power deep investigations and forensics – correlating signals, reconstructing attacker activity, and turning findings into repeatable, automated response playbooks.
• Detection Feedback Loop: Partner with detection engineering to convert hunt findings and incident learnings into higher-fidelity signals, closing the loop between what hunters find and what the platform detects.
• Technical Leadership: Set technical direction for specific projects by identifying priorities, managing expectations, and considering tradeoffs.
• Engineering Excellence: Champion best software engineering practices and empower teams to build a culture of quality and operational excellence.
• Cross-Functional Collaboration: Partner with IT, product, and various security teams to strengthen response readiness and posture across the entire environment.

—- Basic Qualifications —-

• BS/MS Degree in Computer Science, Engineering, or a related field.
• 7+ years of industry experience in a software development or security engineering environment.
• Proficiency in programming languages such as Golang, Java, or Python.
• Deep understanding of distributed systems, high-availability, and high-performance system design.
• Hands-on experience with Cyber Defense such as incident response, threat hunting, and investigation.

—- Preferred Qualifications —-

• Master’s Degree or PhD in Computer Science, Engineering, Information Security or a related field.
• Prior experience leading incident response, threat hunting, digital forensics, and building AI-driven response tooling.
• Deep experience incorporating GenAI agents into production security services, specifically for investigation, triage, or automated response.
• In-depth knowledge of security software frameworks, including EDR solutions (e.g., CrowdStrike, SentinelOne) and SIEM platforms (e.g., Splunk, Chronicle).
• Strong understanding of security frameworks and standards (e.g., MITRE ATT&CK, NIST CSF, ISO 27001).

For New York City, NY-based roles: The base salary range for this role is USD $232,000 per year – USD $258,000 per year.

For San Francisco, CA-based roles: The base salary range for this role is USD $232,000 per year – USD $258,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $232,000 per year – USD $258,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD $232,000 per year – USD $258,000 per year.

For all US locations, you will be eligible to participate in Uber’s bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

Ready to Ride?

This isn’t the kind of place where you follow a playbook – it’s where you help write one. If you’re driven by impact, energized by challenge, and ready to shape how the world moves – we’d love to hear from you.

You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits.

Offices remain key to collaboration and Uber’s culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role’s requirements.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.

Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form- https://docs.google.com/forms/d/e/1FAIpQLSdb_Y9Bv8-lWDMbpidF2GKXsxzNh11wUUVS7fM1znOfEJsVeA/viewform