The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our teams are responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for Uber Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.
About the Role
As a Sr Security Engineer and member of Uber's Red Team, you will be at the forefront of defending our infrastructure and products from cyber threats. You will have the opportunity to simulate and assess real-world attack scenarios to identify vulnerabilities, weaknesses, and security risks. Your work will directly impact the security of Uber's vast ecosystem and help maintain the highest level of protection for our users' data.
Want more jobs like this?
Get Software Engineering jobs delivered to your inbox every week.
What You'll Do
- Red Team Operations: Emulate advanced threat actors by planning, executing, and analyzing complex attack scenarios. Help develop and refine tactics, techniques, and procedures (TTPs) used by adversaries.
- Purple Team Operations: Partner with the Blue team to improve detection and response capabilities.
- Penetration Testing: Conduct penetration testing and vulnerability assessments on Uber's systems, networks, and applications to identify security weaknesses and provide recommendations for remediation.
- Security Research: Stay up-to-date with the latest security threats, vulnerabilities, and attack techniques. Research and experiment with new tools and methodologies to improve the Red Team's capabilities.
- Security Tooling: Develop and maintain custom security tools and scripts to aid in the automation and execution of security assessments and red teaming activities.
- Reporting: Create detailed reports and documentation of findings, risks, and recommendations for technical and non-technical teams. Communicate findings effectively and propose actionable solutions.
- Cross-Functional Collaboration: Work closely with other security teams, engineering teams, and product teams to provide security guidance, share insights, and drive security improvements across Uber
Basic Qualifications
- Bachelor's/Master's degree or equivalent experience in Computer Science, Information Security, or a related field.
- At least 5 years of experience in offensive security roles, such as penetration testing, red teaming, or ethical hacking.
- Proficiency in scripting and programming languages (e.g. Python, Go) for tool development and automation.
- Strong understanding of operating systems, network protocols, and web application security.
- Extensive experience with security assessment tools and frameworks (e.g. Bloodhound, Cobalt Strike, Sliver, Burp Suite, Nmap).
- Vast experience in performing code review to identify vulnerabilities.
- A passion for cybersecurity and a commitment to staying current with emerging threats and industry trends.
Preferred Qualifications
- Comprehensive experience with Linux, macOS and Windows internals.
- Strong understanding of EDR technologies and evasion techniques
- Extensive experience with Red Teaming in modern and complex tech stacks (e.g. containerized environments)
- Extensive experience building tools for Red Team activities (e.g. infrastructure deployment, C2 stagers)
At Uber, we ignite opportunity by setting the world in motion. We take on big problems to help drivers, riders, delivery partners, and eaters get moving in more than 600 cities around the world.
We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have a curiosity, passion and collaborative spirit, work with us, and let's move the world forward, together.
Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.
If you have a disability or special need that requires accommodation, please let us know by completing this form.
For New York, NY-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.
For San Francisco, CA-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.
For Seattle, WA-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.
For Sunnyvale, CA-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.
For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. You will also be eligible for various benefits. More details can be found at the following link https://www.uber.com/careers/benefits.
Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.
Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.