Job Description Cleaned Document
About the role and team Security at Uber is about enabling safe and secure innovation while protecting a global community that spans the digital and physical worlds. As a Senior Staff Security Engineer (L6), you will lead the architecture and implementation of Uber's next-generation cyber defense platform. This is a high-stakes, high-visibility leadership role where you will be responsible for protecting our global infrastructure, products, and data by building highly available, scalable, and extensible security services.
You represent the top tier of our technical talent, serving as both a visionary architect and a hands-on technical leader in a fast-moving, high-ambiguity environment. You will lead major efforts to design industry-leading solutions for security posture management, threat detection, and incident response, all while incorporating advanced ML and Generative AI frameworks. If you are a humble teacher, an empathic leader, and a world-class engineer motivated by the challenge of staying one step ahead of evolving global threats-this is where you'll make your mark.
What you'll do - Set Technical Direction: Identify high-priority security opportunities and define the long-term architecture for cyber defense capabilities, including cloud security posture management (CSPM), vulnerability management, and threat response.
- Lead Platform Innovation: Design and implement robust, scalable security frameworks leveraging a diverse technology stack (SIEM, EDR, SOAR, IAM) across multi-cloud and hybrid environments (GCP, OCI, AWS, Azure).
- Transform Defense through AI: Lead initiatives to leverage automation and AI/ML, shifting threat defense and incident response from human-driven to software-driven workflows.
- Drive Operational Excellence: Champion best software engineering practices and empower teams to build a culture of quality, ensuring our security systems stand the test of massive scale and high availability.
- Incident Leadership: Participate in high-impact incident response activities, leading investigation, containment, and recovery efforts while performing deep root-cause analysis to prevent future occurrences.
- Collaborate and Influence: Partner with executive leadership and cross-functional teams in Engineering, Product, Legal, and Compliance to integrate security into every stage of the development lifecycle.
- Mentor and Grow: Serve as a role model and technical mentor for senior and junior engineers, fostering an inclusive environment of continuous learning and engineering excellence.
Basic Qualifications - 10+ years of professional experience in security engineering and/or software engineering, with a proven track record of solving strategically important problems.
- Expert ability to lead area-wide security projects through all stages: idea inception, threat modeling, requirements gathering, and global productionization.
- Demonstrated experience defining organization-wide standards for security/privacy, testing, and monitoring, while leading the adoption of key frameworks.
- Proven track record of foreseeing architectural problems a year out and working with leadership to address them before they impact global operations.
- Advanced expertise in making complex risk tradeoffs (Security vs. Velocity, Buy vs. Build) and managing the short and long-term implications of those decisions.
- Demonstrated skill in technical writing (ERDs, runbooks) and providing technical guidance on code reviews, design reviews, and post-mortems for junior engineers.
- Experience overseeing large-scale incident management by directing on-call rotations and response processes across multiple organizations.
- Education: Bachelor's Degree or equivalent in Computer Science, Engineering, Mathematics, or a related technical field.
Preferred Qualifications - Expert-level proficiency in Golang, Python, or Java with the ability to adapt security and privacy controls to new technologies with no prior experience.
- Deep knowledge of Cybersecurity, Compliance, and application security threats, including the ability to chain vulnerabilities and design mitigations.
- Experience partnering with EMs and PMs on headcount planning, recruiting, and technical evaluation of high-performing team members.
- Strategic relationship builder: Proven ability to sustain collaborative relationships across Engineering, Legal, and Finance to create alignment and build trust.
- Serves as a technical brand ambassador, representing Uber to the broader internal and external technical community.
ResponsibilitiesFor San Francisco, CA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.
You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.
Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.
