Senior Security Engineer, Application Security

Uber

Quick summary

Work type: On-site
Location: Seattle, WANew York, NYSan Francisco, CASunnyvale, CA
Posted: 25 days ago
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $183k

$133k most similar roles pay here $230k

This listing doesn't post a salary. Most similar roles pay $149,687–$216,000.

Based on 240 similar postings.

Employer

About Uber

Uber Technologies, Inc. is the world’s largest, San Francisco-based mobile technology platform facilitating on-demand ride-hailing, food delivery (Uber Eats), and freight transportation across approximately 70 countries.

Uber currently has 45 open roles on FindRole.

Most-posted roles

View all roles at Uber

At a glance

TL;DR · Senior Security Engineer, Application Security

Role Posting Log in to save

Uber seeks a Senior Security Engineer to join its Application Security team in New York, Seattle, or San Francisco. This senior-level position involves designing and deploying next-generation security automation, including AI-driven vulnerability scanning and intelligent asset indexing, to enhance Uber’s application ecosystem. Day-to-day responsibilities include building large-scale automation for discovering and remediating vulnerabilities, developing end-to-end systems for secret discovery and code scanning, and collaborating with cross-functional teams to integrate security capabilities into the platform. The ideal candidate has 5+ years of software engineering experience, strong programming skills in Go, Java, C, or Python, and a solid understanding of service-oriented architectures. Additional preferred qualifications include expertise in distributed system design, real-time data pipelines, and threat modeling. This role offers significant impact on Uber’s security posture and opportunities for mentorship and professional growth.

Skills

Go Python Java C REST APIs Kafka Docker CI/CD AWS GitHub PostgreSQL MongoDB Redis OAuth JWT OWASP Top 10 Swagger/OpenAPI GitLab Jenkins SonarQube Splunk

What you'll do

Design and deploy large-scale automation to discover and remediate security vulnerabilities.
Develop end-to-end systems for application security platforms including secret discovery and code scanning.
Identify coverage gaps in security-sensitive functionality and automate solutions to address them.
Research novel attack techniques and automate their detection using innovative tools.
Build distributed backend systems for real-time analytics and data-driven security insights.
Mentor junior team members and provide guidance on remediation of identified security issues.

What we're looking for

5+ years of professional experience in software engineering.
Strong programming skills in Go, Java, C, or Python.
Experience identifying and remediating common security vulnerabilities (OWASP Top 10).
Solid understanding of service-oriented and distributed system architectures.
Expertise in designing and implementing REST APIs and datastores.
Familiarity with distributed messaging systems like Kafka.
Experience integrating open-source security scanners and tools.