Software Engineer II - Enterprise Security

About the Role

We are seeking a Software Engineer II with technical security experience to join our Enterprise Security team. In this role, you will be tasked with developing and executing on various cybersecurity initiatives at scale, across the fleet of systems technology of our enterprise and the infrastructure that powers Uber itself. You'll collaborate cross-functionally to raise the operational safety, quality, and security bar across multiple domains and sub-teams.

What the Candidate Will Need / Bonus Points

---- What the Candidate Will Do ----

This is a unique opportunity to work across disparate Platform and Security engineering teams, to make a real impact on Uber's security posture, these include:

1. Developing, scaling, and managing security infrastructure to secure and maintain our production security tooling, including full lifecycle ownership of our Endpoint Detection and Response (EDR) agents, endpoint Binary Authorization capabilities, and Device Attestation services.
2. Help driving the roadmap for owned services, its security features, and engineering enhancements, balancing security risk trade-offs with operational efficiency and a keen eye towards safe deployment in order to ensure optimal protection of our production systems' preventive and defense capabilities.
3. Innovating via modern tools and techniques, e.g. leveraging AI driven approaches to enhance observability, behavioral analysis, automation, and improving Uber's overall security resilience.

1. 2+ years of professional software development experience
2. Experience developing, deploying, and configuring security services and tools, including API development, gRPCs, authentication, Infrastructure as Code, and Distributed Messaging (Kafka).
3. Understanding of secure software development practices, threat modeling, and common security vulnerabilities (OWASP, CVEs, exploit mitigation, supply chain security).
4. Demonstrated hands-on experience in modern operating systems (Windows, macOS, Linux), including internals, kernel engineering, debugging, and security hardening.

1. Intermediate level experience (3+ years) designing and implementing distributed, high-performance, and fault-tolerant enterprise backend systems that scale efficiently.
2. Mid+ level programmatic experience with modern security tools in Threat Detection & Response (TDR), Endpoint Security, or equivalent open-source security solutions-leveraging automation and telemetry for security analytics.
3. Passionate about building high-quality, scalable, and developer-friendly security tooling that optimizes for automation, resilience, deployment safety and efficiency at scale.