This listing doesn't post a salary. Most similar roles pay
$151,493–$219,068.
Based on 240 similar postings.
Employer
About Uber
Uber Technologies, Inc. is the world’s largest, San Francisco-based mobile technology platform facilitating on-demand ride-hailing, food delivery (Uber Eats), and freight transportation across approximately 70 countries.
As a Staff Security Engineer on the Offensive Security team, you will proactively identify and reduce risk across critical services and emerging technologies. You will perform hands-on penetration testing of applications, APIs, infrastructure, and AI agents to uncover exploitable vulnerabilities and complex attack paths. Your role involves conducting security design reviews and threat modeling for agentic systems while building AI-powered automation to scale these assessments across a hybrid cloud and distributed systems environment. You will collaborate with engineering teams to translate technical findings into systemic improvements and actionable guidance. The position requires expertise in vulnerability discovery, risk assessment, and offensive security methodologies. Key skills include experience with LLMs, automation frameworks, and securing microservices. You will solve complex security challenges by navigating design trade-offs to strengthen the overall posture of products and services.
What does a Security Engineer earn in California?
Median $209900 from 30 postings across 15 companies.
Perform hands-on penetration testing on critical services, applications, APIs, infrastructure, and AI agents.
Conduct security design reviews and threat modeling for AI agents and agentic systems.
Build AI-powered automation to scale security design reviews, threat modeling, and vulnerability validation.
Analyze engineering proposals to identify flaws in cloud, infrastructure, application, and data layers.
Translate technical security findings into actionable guidance for both technical and non-technical stakeholders.
Partner with engineering teams to implement systemic improvements that eliminate entire classes of vulnerabilities.
Provide corrective guidance on complex design trade-offs to improve the overall security posture of products.
What we're looking for
7+ years of professional experience in security engineering, threat detection, or client platform engineering.
Demonstrated ability to independently analyze complex, large-scale system designs and drive technical solutions across multiple services.
Deep knowledge of threat modeling, vulnerability discovery, risk assessment, and offensive security methodologies in production environments.
Extensive experience assessing the security of cloud-native services, microservices, distributed systems, and APIs.
Proven ability to lead complex security assessments and influence engineering teams to implement improvements.
Experience applying AI/LLMs, agents, or automation frameworks to security testing and vulnerability discovery.
Hands-on experience conducting penetration testing of complex applications, services, APIs, and infrastructure.
Master’s degree or PhD in a technical field and 10+ years of experience in cybersecurity leadership (preferred); advanced expertise in AI/ML for security (preferred).
Terraform
Infrastructure-as-Code
GitOps
Python
Go
Bash
PowerShell
Jamf Pro
FleetDM
Okta
Google Workspace
LDAP
macOS
iOS
Windows
Linux
Git
Security Operations