Sr Security Engineer - DDOS and Bot Defense

About the Role

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our teams are responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for the Uber Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.

We are seeking a Senior Security Engineer to join our Network Security team, with a primary focus on Bot Defense and DDoS Mitigation. In this role, you will help design, build, and optimize scalable network security systems, algorithms, and automated defense mechanisms to protect our global services against automated threats, volumetric attacks, and malicious bot activity. You will work closely with cross-functional teams to enforce policies, improve real-time threat detection, and maintain system resilience at scale.

What the Candidate Will Do

• Design, implement, and scale distributed backend systems and real-time algorithms to detect, prevent, and mitigate automated bot attacks and volumetric DDoS threats targeting edge and network infrastructure.
• Leverage real-time streaming frameworks and machine learning capabilities to process network telemetry, identify traffic anomalies, and mitigate threats.
• Automate and enforce network access controls, segmentation policies, and edge security configurations using Terraform.
• Improve security visibility, logging, and metrics within container-based and cloud-native environments.
• Monitor network traffic and security dashboards to respond to ongoing security incidents, partner with internal engineering teams on threat resolution, and embed security best practices across services.
• Drive technical quality through rigorous code and design reviews, establish operational runbooks, and mentor junior engineers within the team.

Basic Qualifications

• Bachelor’s Degree or equivalent in Computer Science, Engineering, Mathematics, or a related field.
• 5+ years of professional full-time experience in software engineering, cybersecurity, or network security engineering.
• Proficiency in at least one production programming language: Go, Java.
• Deep understanding of network protocols and concepts, including TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs, and network segmentation.
• Experience with cloud technologies (e.g., AWS, GCP, OCI) and containerization (e.g., Docker, Kubernetes).

Preferred Qualifications

• Direct experience in network security, cybersecurity, bot detection, or DDoS mitigation at scale.
• Hands-on experience incorporating AI/ML models into production systems and working with real-time streaming frameworks (e.g., Apache Flink, Kafka).
• Experience with Secure Access Service Edge (SASE) platforms (e.g., Zscaler).
• Relevant security certifications (e.g., CISSP, CCNP) are a plus.

For Seattle, WA-based roles: The base salary range for this role is USD $202,000 per year - USD $224,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.