Senior Staff Security Engineer

About The Team

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our team is responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for Uber's Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.

About The Role

Our mission is to protect, defend, and secure Uber's products, infrastructure and data by building highly available, scalable and extensible security solutions and services. We are focused on proactively identifying and remediating security risks as well as swiftly detecting and mitigating security incidents. In the ever-evolving landscape of cybersecurity, we continuously adapt and evolve our defenses in order to always stay one step ahead of potential threats. We are seeking a talented and experienced Sr. Staff Security Engineer to join our Cyber Defense team and lead the development of the next generation security platform. This platform will be instrumental in enhancing our cyber defense capabilities across security posture management, threat detection, incident response, and more. The security landscape is constantly evolving, and with the adoption of ML/GenAI backed by extensive heterogeneous data, security threats are inevitably broadened. With your deep and comprehensive expertise across major technology stacks, you will lead major efforts to design, implement and scale industry-leading security solutions for cyber defense. You are not only role models, but also empathic leaders. You are humble teachers, technically mentoring passionate engineers while also delivering uniquely challenging projects. You will have the opportunity to work on cutting-edge technologies, collaborate with cross-functional security and engineering teams, and play a key role in shaping our cybersecurity strategy.

Job Duties

• Lead the technical direction and architecture of our cyber security defense capabilities, including areas such as enterprise security posture management, threat detection and response, and vulnerability management.
• Design and implement robust and scalable security solutions leveraging a diverse range of technologies (e.g., SIEM, EDR, SOAR, cloud security platforms, IAM).
• Lead incident response efforts, including investigation, containment, and recovery activities. Perform post-incident analysis and recommend improvements to prevent future occurrences.
• Proactively research and evaluate emerging security threats, technologies, and trends, and provide recommendations for their adoption to enhance our security posture.
• Collaborate effectively with cross-functional teams, including Engineering, IT, Legal, and Compliance, to integrate security considerations into the development lifecycle and business processes.
• Mentor and provide technical guidance to junior security engineers, fostering a culture of continuous learning and growth within the team.
• Contribute to the development and automation of security tools and processes to improve efficiency and effectiveness.
• Communicate complex security concepts and risks effectively to both technical and non-technical audiences.
• Participate in security audits and compliance initiatives, providing technical expertise and ensuring adherence to security standards.

Minimum qualifications:

• Bachelor's Degree or equivalent in Computer Science, Engineering, Information Security or related field
• 10+ years full-time work experience in security engineering, with a strong focus on security defense and incident response.
• Deep technical expertise in multiple security domains, such as network security, endpoint security, cloud security (GCP, OCI, Azure, AWS), and identity and access management.
• Strong scripting and automation skills (e.g., Python, PowerShell, Bash, Golang) are highly desirable.
• Proven experience designing, implementing, and managing complex security solutions at an enterprise level.
• Excellent analytical and problem-solving skills, with the ability to diagnose and resolve complex security issues.
• A proactive and results-oriented mindset with a passion for staying ahead of the evolving threat landscape.
• Experience leading technical security projects and mentoring other engineers.
• Excellent communication, collaboration, and interpersonal skills, with the ability to effectively communicate technical information to diverse audiences.

Preferred qualifications:

• Master's Degree or PhD in Computer Science, Engineering, Information Security or related field
• Proficiency in security tools and technologies, including SIEM platforms (e.g., Splunk, Chronicle), EDR solutions (e.g., CrowdStrike, SentinelOne), vulnerability scanners (e.g., Qualys, Nessus), and penetration testing tools.
• Strong understanding of security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2).
• Familiarity with the development of production services on public cloud providers (GCP, OCI, Azure or AWS)
• Experience with AI technologies and frameworks and incorporating them into production systems
• Experience in leading complex projects across multiple engineering organizations

About Uber

At Uber, we ignite opportunity by setting the world in motion. We take on big problems to help drivers, riders, delivery partners, and eaters get moving in more than 600 cities around the world! We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have a curiosity, passion and collaborative spirit, work with us, and let's move the world forward together! Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form . For New York, NY-based roles: The base salary range for this role is USD$267,000 per year - USD$297,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$267,000 per year - USD$297,000 per year. For Sunnyvale, CA-based roles: The base salary range for this role is USD$267,000 per year - USD$297,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.

Key skills/competency

• Security Engineering
• Cyber Defense
• Incident Response
• Security Posture Management
• Threat Detection
• Vulnerability Management
• Cloud Security
• Identity and Access Management
• Security Automation
• Mentoring Engineers