Staff Security Engineer - Engineer

Staff Security Engineer, Enterprise Security

About the Role

Our mission is to protect, defend, and secure Uber's products, infrastructure, and data by building highly available, scalable, and extensible security solutions and services. We focus on proactively identifying and mitigating security risks, strengthening foundational security controls, and continuously evolving our defenses to stay ahead of emerging threats.

We are seeking an experienced Staff Security Engineer, Enterprise Security to provide technical leadership in designing, building, and scaling security capabilities that protect Uber's enterprise environment. This role will own key security initiatives and drive technical delivery across corporate endpoints, infrastructure, enterprise applications, and cloud environments.

As Uber's technology footprint grows and the threat landscape evolves, traditional approaches to enterprise security must give way to scalable, automated, and security-by-default solutions. You will lead complex, cross-team initiatives to modernize foundational security controls, reduce attack surfaces, improve threat prevention and detection capabilities, and strengthen cyber resilience.

What You Will Do

• Own the technical direction, design, and delivery of key Enterprise Security capabilities, contributing to the team's architecture and roadmap while aligning engineering priorities with evolving threats and business needs.
• Design, build, and lead the implementation of security solutions across corporate endpoints, production infrastructure, and enterprise environments, applying defense-in-depth and zero-trust security principles.
• Drive technical improvements in endpoint protection, endpoint detection and response (EDR), application control, system hardening, security posture management, and infrastructure security across macOS, Windows, and Linux environments.
• Build and operate scalable security platforms, services, and automated workflows that improve security coverage, reduce operational complexity, and enable consistent enforcement of security controls.
• Partner with Infrastructure, IT, Client Platform Engineering, Cloud Security, and other engineering teams to drive security-by-default designs, resolve complex technical challenges, and deliver security improvements at scale.

Basic Qualifications

• Bachelor's degree or equivalent practical experience in Computer Science, Engineering, Cybersecurity, or a related technical field.
• 7+ years of professional experience in security engineering, systems engineering, infrastructure security, or software engineering, with significant experience designing and implementing security solutions at scale.
• Deep technical expertise in one or more enterprise security domains, such as endpoint security, infrastructure security, EDR, application control, zero-trust architecture, or enterprise security platforms.
• Demonstrated ability to assess threats and attack paths, translate security risks into technical requirements, and design controls that balance security effectiveness, reliability, and usability.
• Proficiency in one or more programming languages such as Golang, Python, Java, or C/C++, with demonstrated experience building production-grade software, automation, or security infrastructure.

Preferred Qualifications

• Master's degree or PhD in Computer Science, Engineering, Cybersecurity, or a related technical field.
• Deep expertise in enterprise endpoint and infrastructure security technologies, including EDR/XDR, device management, system hardening, and endpoint security controls.
• Experience designing and deploying security solutions across large-scale environments spanning corporate devices, on-premises infrastructure, and public cloud platforms.
• Strong understanding of enterprise security technologies such as Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), secure enterprise browsers, SaaS security, and data loss prevention.
• Experience applying AI/ML, agentic systems, or advanced automation to security operations, threat analysis, security policy enforcement, or incident investigation.

For Seattle, WA-based roles: The base salary range for this role is USD $232,000 per year - USD $258,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.