Job DescriptionThe Security Engineering team at Uber is focused on making the production and corporate environments secure by default to provide industry-leading solutions for Uber's production services and infrastructure. It provides our workforce and trusted partners a full stack identity and access management platform across a multi-cloud and hybrid SaaS environment. Our principal is secure by default with least privilege that enables business efficiency and productivity.
About the Team:Core Security Engineering's mission is to make the Uber production environment secure by default and provide industry leading products and services to all Uber's production services and infrastructure. We are focused on building both security primitives and end users products that help Uber engineers to secure their service, build trust, and advance security to enable our global business.
We are responsible for providing and managing systems, services, and libraries to provide access management, and enforcement at scale. The scope spans across multiple verticals like service-to-service authentication/authorization, employee to system auth, customer auth.
You'll work on critical distributed multi-cloud services at a massive scale crafted with the best security practices at the forefront. You'll be accountable for long term decisions on leveraging next generation infrastructure to continuously scale and operate such foundational security services.
About the RoleWe are seeking a highly skilled Senior Staff Engineer to join our cutting-edge technology team. In this role, you will be a thought leader, shaping the company's cybersecurity architecture and engineering strategies to keep its security posture at the leading edge. The role involves defining the next-generation architecture spanning authorization platform and agent mesh identity - setting the technical direction that the rest of the org will build against. You will optimize multi-tenanted zero-trust identity security models within cloud-native architectures, and lead cross-functional initiatives. You will collaborate with global teams to establish robust security design patterns to ensure compliance with industry best practices, protecting sensitive data. You will be influential to shape Uber engineering security to adopt 'shift-left' principal, leading to an overall proactive cybersecurity practice.
---- What the Candidate Will Do ----- Design and implement scalable zero-trust frameworks for applications, ensuring secure access and communication across microservices.
- Provide technical leadership, focusing on delivering impactful solutions to secure Uber and modernizing the company's security stack, ensuring architecture stays current with evolving technologies and threats.
- Provide technical leadership in designing, implementing, testing, and rolling out the Authorization platform at Uber.
- Design and develop scalable, reliable, and high-performance platform and services for Uber's cyber defense.
- Deliver high-quality code, conduct code reviews.
- Be intentional about leveraging AI/ML to shift-left security.
- Spearhead strategic cybersecurity projects. Conduct Proofs of Concept (POCs) to evaluate and implement emerging security solutions.
- Work closely with leadership to prioritize and manage engineering roadmaps.
- Partner with technology, business and compliance teams to ensure cybersecurity solutions support strategic objectives and regulatory requirements.
- Build, lead, and develop high-performing security engineering and architecture teams, fostering a culture of technical excellence, continuous learning and innovation.
- Act as a mentor and advocate for team members' growth, focusing on upskilling talent to address evolving security challenges.
---- Basic Qualifications ----- Bachelor's or Master's degree in Computer Science, Engineering, or related field.
- 12+ years of experience in software engineering
- Expertise in writing high-quality code to solve strategically important problems that span multiple organizations, including proficiency in one or more programming languages (Go, Java, Python, C/C++) and code reviews.
- Knowledge of cybersecurity concepts, tools, and best practices
- Deep understanding of software engineering fundamentals, including algorithms, data structures, system design, and architecture.
- Strong problem-solving skills and a passion for innovation
- A growth mindset with the ability to adapt to a fast-paced, ever-changing environment.
- Experience leading org-wide engineering projects through all lifecycle stages: inception, stakeholder engagement, implementation, and operations.
- Proven track record of overseeing incident management processes and directing on-call rotations in alignment with global best practices.
- Demonstrated ability to make sound engineering/business tradeoffs, considering long-term implications for the greater good of Uber.
---- Preferred Qualifications ----- Experience building high-performance, scalable distributed systems at a 100M+ user scale.
- Expertise in real-time streaming frameworks (Flink, Spark) and OLAP systems (Apache Pinot, Druid) to reduce system complexity.
- Strong leadership traits: Experience serving as a representative for the organization to the broader internal and external technical community.
- Proven ability to get alignment and buy-in for large-scale technology transformations across multiple job functions.
- Experience with AI/ML technologies / frameworks and incorporating them into production systems
ResponsibilitiesFor San Francisco, CA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.
For Sunnyvale, CA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.
For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.
