Uber

Security Engineer II - Design Review/Threat Modeling

Uber • $171K — $190K *
Seattle, WA 98115In-Person
Information Technology
Less than 5 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 3+ years in security engineering, systems architecture, or related software field.
  • Ability to analyze complex system designs for security solutions.
  • Knowledge of threat modeling, vulnerability classification, and risk frameworks.
  • Experience with cloud-native services and distributed systems security designs.
  • Bachelor's degree in Computer Science, Engineering, or equivalent experience.

Responsibilities

  • Conduct security design reviews and threat modeling across Uber's codebase.
  • Assess third-party AI agents through adversarial testing for security risks.
  • Perform hands-on penetration testing of critical services and applications.
  • Design AI-powered automation for security assessments at scale.
  • Partner with teams to translate security findings into systemic improvements.
  • Navigate design trade-offs to enhance Uber's security posture.
  • Collaborate with engineering teams to identify potential flaws before production.

Benefits

  • Participation in Uber's bonus program.
  • Eligibility for equity awards.
  • Access to a 401(k) plan.
  • Various employee benefits.
Full Job Description
Job Description

About the role and team:

As a member of Uber's Security Review Team, you will work across multiple security disciplines to proactively identify and reduce risk in Uber's most critical services and emerging technologies. You will perform security design reviews and threat modeling for critical services and AI agents, conduct hands-on penetration testing to validate real-world attack paths, and help build AI-powered automation that transforms how these security assessments are performed at scale. This role combines deep technical security expertise with an automation-first mindset, helping evolve traditional point-in-time assessments toward continuous, scalable security testing across Uber's technology ecosystem.

This isn't a "set and forget" role. Our environment is fast-moving and the threats are constantly evolving. You will navigate the "messy" reality of hybrid cloud and distributed systems, conducting technical security design reviews as part of our secure software development lifecycle. We are looking for a technically curious engineer who thrives in ambiguity, takes extreme ownership of their work, and has the grit to stay ahead of sophisticated adversaries. If you are motivated by high-stakes challenges and want to build a more secure future for movement - this is where you'll grow.

What you'll do

  • Conduct security design reviews and threat modeling across Uber's diverse codebase, evaluating security risks in services, applications, APIs, infrastructure, mobile platforms, AI systems, and other production software.
  • Assess third-party AI agents, including coding and work-focused agents, through adversarial testing to identify security risks in agent behavior, tool use, data access, permissions, prompt injection, and external integrations.
  • Perform hands-on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents to identify exploitable vulnerabilities and complex attack paths
  • Design and build AI-powered automation for security design reviews, threat modeling, penetration testing, increasing the scale, frequency, and depth of Offensive Security assessments.
  • Partner with engineering and security teams to translate offensive security findings into systemic improvements, helping eliminate vulnerability classes and strengthen security controls across Uber's technology ecosystem.
  • Perform multi-disciplinary security design reviews of engineering proposals, analyzing cloud, infrastructure, application, and data-layer security.
  • Navigate complex design trade-offs to provide corrective guidance that improves the overall security posture of Uber's products and services.
  • Collaborate with engineering teams across the company to analyze design documents and identify potential flaws before they reach production.
  • Translate technical security findings into actionable guidance for both engineering and non-technical stakeholders to ensure alignment and impact.
  • Conduct comprehensive security assessments, including threat modeling for web and mobile applications, to identify and mitigate risks at scale.
  • Champion engineering best practices and serve as a security ambassador, helping teams move fast while building with integrity and care.


Basic Qualifications

  • 3+ years of professional experience in security engineering, systems architecture, or a related software engineering field.
  • Proven ability to analyze complex system designs and provide technical input to solve security challenges with multiple dependencies.
  • Broad knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
  • Experience with security designs related to cloud-native services, microservices, or distributed systems.
  • Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.


Preferred Qualifications

  • Hands-on experience performing security design reviews and threat modeling across complex applications, services, APIs, distributed systems, cloud infrastructure, and mobile platforms.
  • Demonstrated ability to identify complex attack paths and systemic security weaknesses by reasoning across application, infrastructure, identity, data, and trust boundaries.
  • Experience conducting code-assisted security reviews, using source code to validate architectural assumptions, security controls, data flows, authorization boundaries, and potential vulnerabilities.
  • Experience reviewing large-scale distributed and cloud-native architectures, including microservices, service-to-service authentication, APIs, messaging systems, data stores, and multi-cloud environments.
  • Advanced proficiency in at least one backend language such as Go, Java, or Python to evaluate code-level security.
  • Hands-on experience with multi-cloud environments (e.g., AWS, GCP) and data store technologies (SQL or NoSQL).
  • Experience applying AI/LLMs, agents, or automation frameworks to security testing, vulnerability discovery, threat modeling, or other security engineering workflows.
  • Strong systems thinking with the ability to simplify complex technical concepts and influence without authority.
  • Experience working within an automated CI/CD environment or a mature Secure Software Development Lifecycle (S-SDLC).


Responsibilities

For Seattle, WA-based roles: The base salary range for this role is USD $171,000 per year - USD $190,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

About Uber

Uber Entertainment, Inc. is a privately held video game development company headquartered in beautiful downtown Kirkland, WA. Uber is currently developing Planetary Annihilation, a next generation real time strategy game of epic proportions.

Uber Careers

There has never been a better time to join our global team of Uber professionals—pioneers in the world of transportation and technology. Work you’ll do Join Uber’s industry-leading team to help drive forward the future of mobility and logistics for some of the world’s most dynamic cities and populations. Transform the way the world moves with the brightest minds at Uber, where innovation meets functionality to create solutions for everyday challenges. Lead from a unique position in the marketplace, at the intersection of technology, operational excellence, and user-centric design. Work with a global team of business and technology advisors to help clients and cities navigate their paths towards more efficient and sustainable urban transport solutions. Collaborate with a diverse group of Uber experts worldwide – a team dedicated to rethinking and improving the way the world moves. Introducing the Uber Innovation Hub We are building a market-leading team to pioneer advancements in transportation and logistics, ensuring Uber remains at the forefront of mobility solutions. Do innovative work Join a group of exceptional professionals where your skills in technology, leadership, and creativity can flourish. At Uber, innovation isn’t just a buzzword—it's the core of everything we do. Deliver targeted solutions through a depth and breadth of expertise and innovation that’s second to none, enhancing how cities, companies, and communities connect. Be part of a great team Engage with a wide-ranging technology stack and harness the unparalleled capabilities, global scale, and collective problem-solving skills of our diverse team. Future-proof your career Advance your career with Uber’s commitment to professional growth, offering extensive training, development, and certification support. Go as far as your ambition takes you with limitless job opportunities in a company that’s reshaping the world’s approach to transportation. Explore Uber’s approach to predictive maintenance ensures our fleet remains ready and efficient, reducing downtime and improving service reliability. Our end-to-end mobility solutions are transforming the way cities think about transportation, making Uber a key player in the future of urban mobility. The Uber Leadership and Innovation Alliance Our combined service capabilities, global scale, and joint solution development help overcome challenges and lead transformation in the transportation industry. Clients and cities around the globe look to Uber for new strategies and solutions to drive growth and innovation in the digital era. Stay connected Join Our Team Search open positions that match your skills and interest. We look for passionate, curious, creative, and solution-driven team players ready to redefine the world of mobility. SEARCH UBER JOBS Keep Up to Date Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who drive at Uber. READ CAREERS BLOG Job Alert Emails Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Explore the exciting and rewarding career opportunities that await at Uber.
Learn more about Uber
Size
29,300 employees
Market Cap
$48.6 billion
Industry
Transportation
Net Income
-$6.7 billion
Founded
2009
5 Year Trend
+35.3%
Revenue
$11.1 billion
NASDAQ
UBER
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Uber

More Information Technology Jobs

Find similar Security Engineer II - Design Review/Threat Modeling jobs:

NationwideSeattle, WA