Sr Staff Security Engineer - Engineer

About the Role

Our mission is to protect, defend, and secure Uber's products, infrastructure, and data by building highly available, scalable, and extensible security solutions and services. We focus on proactively identifying and mitigating security risks, strengthening foundational security controls, and continuously evolving our defenses to stay ahead of emerging threats.

We are seeking an experienced Senior Staff Security Engineer, Enterprise Security to provide technical leadership in architecting, building, and scaling security capabilities that protect Uber's enterprise environment. This role will drive the evolution of our security architecture and platforms across corporate endpoints, infrastructure, enterprise applications, and cloud environments.

As Uber's technology footprint grows and the threat landscape evolves, traditional approaches to enterprise security must give way to scalable, automated, and security-by-default solutions. You will lead complex, cross-organizational initiatives to modernize foundational security controls, reduce attack surfaces, improve threat prevention and detection capabilities, and strengthen cyber resilience.

What You Will Do

• Define and drive the technical strategy, architecture, and roadmap for Enterprise Security, aligning security investments with evolving threats, business priorities, and Uber's technology landscape.
• Architect and lead the implementation of security solutions across corporate endpoints, production infrastructure, and enterprise environments, applying defense-in-depth and zero-trust security principles.
• Drive technical advancements in endpoint protection, endpoint detection and response (EDR), application control, system hardening, security posture management, and infrastructure security across macOS, Windows, and Linux environments.
• Design and scale security capabilities to protect enterprise applications and corporate data, including secure access, browser security, SaaS security, data exfiltration prevention, and application-level security enforcement.
• Architect and build scalable security platforms, services, and automated workflows that improve security coverage, reduce operational complexity, and enable consistent enforcement of security controls.
• Partner with Infrastructure, IT, Client Platform Engineering, Cloud Security, and other engineering teams to drive security-by-default architecture, resolve complex technical challenges, and deliver security improvements at scale.
• Establish high standards for security engineering, architectural design, software quality, and operational excellence. Influence technical decisions, and raise the engineering bar across the organization.

Basic Qualifications

• Bachelor's degree or equivalent practical experience in Computer Science, Engineering, Cybersecurity, or a related technical field.
• 10+ years of professional experience in security engineering, systems engineering, infrastructure security, or software engineering, with significant experience designing and implementing security solutions at scale.
• Deep technical expertise in one or more enterprise security domains, such as endpoint security, infrastructure security, EDR, application control, zero-trust architecture, or enterprise security platforms.
• Strong understanding of operating system security, networking, authentication, authorization, and security architecture across macOS, Windows, and Linux environments.
• Proficiency in one or more programming languages such as Golang, Python, Java, or C/C++, with demonstrated experience building production-grade software, automation, or security infrastructure.
• Demonstrated experience leading complex, large-scale technical initiatives, making architectural decisions, and influencing engineering teams beyond immediate organizational boundaries.

Preferred Qualifications

• Master's degree or PhD in Computer Science, Engineering, Cybersecurity, or a related technical field.
• Deep expertise in enterprise endpoint and infrastructure security technologies, including EDR/XDR, device management, system hardening, and endpoint security controls.
• Experience designing and deploying security solutions across large-scale environments spanning corporate devices, on-premises infrastructure, and public cloud platforms.
• Strong understanding of enterprise security technologies such as Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), secure enterprise browsers, SaaS security, and data loss prevention.
• Experience architecting highly available, fault-tolerant security services, including safe deployment strategies, observability, failure recovery, and operational resilience.
• Experience applying AI/ML, agentic systems, or advanced automation to security operations, threat analysis, security policy enforcement, or incident investigation.
• Proven track record of driving cross-functional technical initiatives, influencing senior engineering leadership, and delivering measurable improvements in security posture.

For San Francisco, CA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.