{"id":1785179,"url":"https://alion.io/job/uber-security-engineer-ii-design-reviewthreat-modeling","title":"Security Engineer II - Design Review/Threat Modeling","company":{"id":230,"name":"Uber","domain":"uber.com","url":"https://alion.io/company/uber","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":92,"open_postings":136,"ghost_share":0,"stale_share":0.463,"repost_share":0.066,"time_to_fill_p50_days":8,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":171000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Function Calling","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"Go","optional":true},{"name":"Java","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-03T15:00:00Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-10-22T02:06:50Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"About the role and team:\nAs a member of Uber’s Security Review Team, you will work across multiple security disciplines to proactively identify and reduce risk in Uber’s most critical services and emerging technologies. You will perform security design reviews and threat modeling for critical services and AI agents, conduct hands-on penetration testing to validate real-world attack paths, and help build AI-powered automation that transforms how these security assessments are performed at scale. This role combines deep technical security expertise with an automation-first mindset, helping evolve traditional point-in-time assessments toward continuous, scalable security testing across Uber’s technology ecosystem.\nThis isn't a \"set and forget\" role. Our environment is fast-moving and the threats are constantly evolving. You will navigate the \"messy\" reality of hybrid cloud and distributed systems, conducting technical security design reviews as part of our secure software development lifecycle. We are looking for a technically curious engineer who thrives in ambiguity, takes extreme ownership of their work, and has the grit to stay ahead of sophisticated adversaries. If you are motivated by high-stakes challenges and want to build a more secure future for movement - this is where you’ll grow.\nWhat you’ll do\nConduct security design reviews and threat modeling across Uber’s diverse codebase, evaluating security risks in services, applications, APIs, infrastructure, mobile platforms, AI systems, and other production software.\nAssess third-party AI agents, including coding and work-focused agents, through adversarial testing to identify security risks in agent behavior, tool use, data access, permissions, prompt injection, and external integrations.\nPerform hands-on penetration testing of critical Uber services, applications, APIs, infrastructure, and AI agents to identify exploitable vulnerabilities and complex attack paths\nDesign and build AI-powered automation for security design reviews, threat modeling, penetration testing, increasing the scale, frequency, and depth of Offensive Security assessments.\nPartner with engineering and security teams to translate offensive security findings into systemic improvements, helping eliminate vulnerability classes and strengthen security controls across Uber’s technology ecosystem.\nPerform multi-disciplinary security design reviews of engineering proposals, analyzing cloud, infrastructure, application, and data-layer security.\nNavigate complex design trade-offs to provide corrective guidance that improves the overall security posture of Uber’s products and services.\nCollaborate with engineering teams across the company to analyze design documents and identify potential flaws before they reach production.\nTranslate technical security findings into actionable guidance for both engineering and non-technical stakeholders to ensure alignment and impact.\nConduct comprehensive security assessments, including threat modeling for web and mobile applications, to identify and mitigate risks at scale.\nChampion engineering best practices and serve as a security ambassador, helping teams move fast while building with integrity and care.\nBasic Qualifications\n3+ years of professional experience in security engineering, systems architecture, or a related software engineering field.\nProven ability to analyze complex system designs and provide technical input to solve security challenges with multiple dependencies.\nBroad knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.\nExperience with security designs related to cloud-native services, microservices, or distributed systems.\nBachelor’s degree in Computer Science, Engineering, or equivalent practical experience.\nPreferred Qualifications\nHands-on experience performing security design reviews and threat modeling across complex applications, services, APIs, distributed systems, cloud infrastructure, and mobile platforms.\nDemonstrated ability to identify complex attack paths and systemic security weaknesses by reasoning across application, infrastructure, identity, data, and trust boundaries.\nExperience conducting code-assisted security reviews, using source code to validate architectural assumptions, security controls, data flows, authorization boundaries, and potential vulnerabilities.\nExperience reviewing large-scale distributed and cloud-native architectures, including microservices, service-to-service authentication, APIs, messaging systems, data stores, and multi-cloud environments.\nAdvanced proficiency in at least one backend language such as Go, Java, or Python to evaluate code-level security.\nHands-on experience with multi-cloud environments (e.g., AWS, GCP) and data store technologies (SQL or NoSQL).\nExperience applying AI/LLMs, agents, or automation frameworks to security testing, vulnerability discovery, threat modeling, or other security engineering workflows.\nStrong systems thinking with the ability to simplify complex technical concepts and influence without authority.\nExperience working within an automated CI/CD environment or a mature Secure Software Development Lifecycle (S-SDLC).\n For Seattle, WA-based roles: The base salary range for this role is USD $171,000 per year - USD $190,000 per year.\nYou will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.","description_format":"text","description_chars":5547,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Transportation & Logistics","Ride Hailing"],"lifecycle":[{"event":"open","at":"2026-10-03T17:23:38Z"}],"visa":[],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.586,"p_room":0.35,"age_days":17,"expected_fill_days":8,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/uber-security-engineer-ii-design-reviewthreat-modeling","json_url":"https://alion.io/job/uber-security-engineer-ii-design-reviewthreat-modeling.json","meta":{"generated_at":"2026-10-22T05:58:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":602,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":230},"rest":"https://alion.io/mcp/rest/get_company?id=230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fuber-security-engineer-ii-design-reviewthreat-modeling"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fuber-security-engineer-ii-design-reviewthreat-modeling"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fuber-security-engineer-ii-design-reviewthreat-modeling"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/uber-security-engineer-ii-design-reviewthreat-modeling\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fuber-security-engineer-ii-design-reviewthreat-modeling"}]}