Senior Security Technologist, Security/Privacy Design Reviewer

What you'll do

• Lead security and privacy design reviews for Uber's services, applications, APIs, infrastructure, and AI systems.
• Perform threat modeling to identify attack surfaces, trust boundaries, and complex chained attack paths for high-risk systems.
• Conduct hands-on adversarial assessments of third-party AI agents to evaluate risks like prompt injection and data exposure.
• Execute code-assisted security reviews and penetration testing to validate architectural assumptions and security controls.
• Analyze sensitive-data handling across complex systems to develop safeguards for data collection, storage, and deletion.
• Build AI-powered automation and security tooling to scale threat modeling and vulnerability validation workflows.
• Develop reusable security methodologies, testing techniques, and frameworks for assessing emerging technologies.
• Partner with engineering and privacy teams to drive remediation of identified vulnerabilities and influence architectural decisions.

What we're looking for

• 5+ years of professional experience in security engineering, application security, product security, offensive security, or related technical security roles.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
• Demonstrated ability to independently review complex technical designs and architectures to identify systemic security risks across applications, APIs, and cloud services.
• Advanced experience performing threat modeling and attack-path analysis across complex systems, including identifying trust boundaries and security assumptions.
• Strong knowledge of security and privacy principles, including authentication, authorization, identity, least privilege, and data protection.
• Significant hands-on experience with security testing, vulnerability research, penetration testing, or adversarial testing to validate exploitability and security controls.
• Proficiency developing security tooling and automation using languages such as Python, Go, or similar, including AI-assisted development.
• Advanced experience conducting adversarial security assessments of AI agents, large language model applications, or agentic systems (preferred).