Security Engineer II

Responsibilities

• Conduct security design reviews and threat modeling for services, applications, APIs, infrastructure, mobile platforms, AI systems, and production software.
• Assess third-party AI agents through adversarial testing of behavior, tool use, data access, permissions, prompt injection, and external integrations.
• Perform hands-on penetration testing to identify exploitable vulnerabilities and complex attack paths.
• Design and build AI-powered automation for security reviews, threat modeling, penetration testing, and offensive security assessments.
• Analyze engineering proposals, cloud and infrastructure designs, application and data-layer security, and distributed-system trade-offs.
• Translate security findings into actionable guidance and systemic improvements for technical and non-technical stakeholders.
• Collaborate with engineering and security teams to identify design flaws before production and strengthen security controls.
• Champion secure engineering practices and serve as a security ambassador across the company.

Requirements

• At least 3 years of professional experience in security engineering, systems architecture, or a related software engineering field.
• Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
• Ability to analyze complex system designs and provide technical input for security challenges involving multiple dependencies.
• Knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
• Experience with cloud-native services, microservices, distributed systems, or related security designs.
• Experience with security design reviews and threat modeling across applications, services, APIs, infrastructure, mobile platforms, and AI systems.
• Ability to identify complex attack paths and systemic weaknesses across application, infrastructure, identity, data, and trust boundaries.
• Experience with code-assisted security reviews and large-scale distributed or cloud-native architectures.
• Advanced proficiency in at least one backend language such as Go, Java, or Python.
• Experience with multi-cloud environments such as AWS and GCP and with SQL or NoSQL data stores.
• Experience applying AI, LLMs, agents, or automation frameworks to security testing or security engineering workflows.
• Experience with automated CI/CD environments or a mature Secure Software Development Lifecycle.

Benefits

• Base salary range of USD $171,000 to USD $190,000 per year for Seattle, Washington-based roles.
• Eligibility for Uber’s bonus program and potential equity awards and other compensation.
• 401(k) plan eligibility for full-time employees.
• Various employee benefits.