Staff Security Engineer: RBVM Platform & AI Remediation

Uber; San Francisco (CA); On-site; USD 232,000 - 258,000; Full time

Benefits offered by this job

Bonus program

Equity award

401(k) plan

In-office requirement

Job summary

Uber is seeking a Staff Security Engineer, Vulnerability Management in San Francisco, CA to lead the evolution of our RBVM platform and mature our vulnerability governance at enterprise scale.

You will architect next-generation systems, drive AI-driven remediation workflows, and mentor engineers across on-prem, cloud, and container environments while aligning with compliance standards and risk management.

Qualifications

• 7+ years of software or security engineering experience.
• Experience building large-scale security or infrastructure platforms.
• Expertise designing distributed systems for high availability.
• Strong knowledge of container security, cloud-native infra, and CI/CD.
• Experience leading cross-functional security initiatives and mentoring staff.

Responsibilities

• Design and scale RBVM tools for a unified, risk-scored view of vulnerabilities across on-prem, cloud, containers, VMs, and endpoints.
• Build automated remediation workflows to reduce median response times and scale across teams.
• Lead Shift-Left initiatives by integrating vulnerability scanning into development workflows, CI/CD, and infra provisioning.
• Leverage AI/ML for automated triage, impact analysis, and remediation guidance for service owners.
• Collaborate with IT, product, and ops to improve security posture across the environment.

Skills

Security engineering

Distributed systems

Vulnerability management

CI/CD

Golang

Java

Python

Leadership

Mentoring

Tools

Golang

Java

Python

Job description

Uber is seeking a Staff Security Engineer, Vulnerability Management in San Francisco, CA to lead the evolution of our RBVM platform and mature our vulnerability governance at enterprise scale.

You will architect next-generation systems, drive AI-driven remediation workflows, and mentor engineers across on-prem, cloud, and container environments while aligning with compliance standards and risk management.