This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Uber is seeking a Senior Security Engineer to join our Application Security team. In this role, you will help evolve and extend Uber’s already highly automated AppSec platform by designing and deploying next-generation capabilities, including AI-driven vulnerability scanning, agent-based discovery, and intelligent asset indexing. You will build and operate security automation that continuously identifies vulnerabilities such as XSS, SQLi, CSRF, SSRF, and more across Uber’s application ecosystem. You will apply strong software engineering fundamentals to build production-grade systems that raise the security bar across Uber’s mobile and web applications. This role offers the opportunity to collaborate closely with engineers across the company, mentor junior team members, make a measurable impact on Uber’s security posture, and continue growing both your software engineering and security expertise.
Job Responsibility:
Design, build, and deploy large-scale automation to discover, analyze, and remediate security vulnerabilities across thousands of services
Design end-to-end systems and features for application security platforms, including secret discovery, code scanning, and vulnerability remediation
Identify security-sensitive functionality and coverage gaps across applications and services, and develop automation to close those gaps
Research novel attack techniques and security weaknesses, and automate their detection using innovative tools and approaches
Build distributed backend systems that power real-time analytics and data-driven security insights at Uber scale
Collaborate closely with engineering teams and stakeholders across Security, Privacy, Compliance, Infrastructure, and Product to integrate security capabilities into Uber’s platform
Provide guidance to application and service owners to remediate identified security issues
Perform threat modeling, design reviews, and code reviews to assess security risks in new and existing systems
Mentor junior and new graduate engineers
Requirements:
Bachelor’s degree in Computer Science, Engineering, or a related field
5+ years of professional experience in software engineering
Strong programming experience in one or more languages such as Go, Java, C, or Python (Go preferred)
Experience identifying and remediating common security vulnerabilities (e.g., OWASP Top 10)
Solid understanding of service-oriented and distributed system architectures
Experience designing and implementing REST APIs
Experience with datastore technologies, including relational and NoSQL databases
Familiarity with distributed messaging systems (e.g., Kafka or similar)
Nice to have:
Master’s degree (or Ph.D.) in Computer Science, Engineering, or a related field
Experience designing, implementing, and operating production-quality distributed systems
Experience building real-time data pipelines and analytics systems