The Team
The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our team is responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for Uber’s Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.
About the Role:
Our mission is to protect, defend, and secure Uber’s products, global infrastructure, and data by building highly available, scalable, and extensible network security solutions and services. We are focused on proactively architecting resilient network boundaries, building next-generation edge security controls, and mitigating threats such as DDoS and automated bot attacks at massive global scale.
We are seeking a talented and experienced Sr. Staff Security Engineer to join our Cyber Defense team. With your deep technical expertise across large-scale distributed systems, edge architectures, zero-trust network design, and threat mitigation technologies, you will lead major initiatives to design, implement, and scale industry leading network security solutions. You are not only a visionary technical leader, but also an empathetic mentor who elevates engineering teams while delivering solutions to uniquely challenging problems. You will collaborate closely with cross-functional infrastructure, security, and product engineering teams to shape our global network security strategy.
What you will do:
- Lead the overall technical vision, architecture, and long-term strategy for Uber’s global network security capabilities, including Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), network segmentation, perimeter defense, bot detection/mitigation, and volumetric DDoS protection.
- Architect, implement, and scale high-performance, distributed backend systems and edge services to defend against advanced network threats in real-time.
- Evaluate, select, integrate, and manage relationships with external security vendors and third-party platforms to enhance threat coverage, edge mitigation, and challenge capabilities.
- Establish network security engineering standards, conduct comprehensive architectural reviews, and ensure end-to-end resilience and low latency across global infrastructure.
- Collaborate across organizational boundaries to seamlessly integrate network security into global systems and development lifecycles.
- Lead critical network security incident response and mitigation efforts during high-severity threat events, performing thorough post-incident analysis to drive systematic prevention.
- Mentor, guide, and sponsor engineers across the organization, fostering a culture of technical excellence, innovation, and continuous growth.
- Communicate complex network security concepts, systemic risks, and strategic initiatives clearly to both executive leadership and technical teams.
- Participate in security audits and compliance initiatives, providing technical expertise and ensuring adherence to security standards.
Minimum Qualifications
- Bachelor’s Degree or equivalent in Computer Science, Engineering, Information Security, or a related technical field.
- 10+ years of full-time work experience in security engineering, software engineering, or network security.
- Proven track record of designing, building, and scaling enterprise-grade network security solutions, backend distributed systems, or perimeter defense infrastructure.
- Proficiency in at least one production programming language such as Go, Java, or C++.
- Deep domain expertise in core network security concepts (e.g., L3/L4/L7 firewalls, zero-trust network access, network segmentation, DDoS mitigation, bot defense, and ingress/egress filtering).
- Strong background in public cloud network security architectures (AWS, GCP, OCI) and modern containerized/orchestrated environments (Kubernetes, Docker).
- Demonstrated experience leading multi-team technical projects, setting engineering strategy, and mentoring junior engineers.
- Exceptional analytical, problem-solving, and architectural skills with a focus on low-latency, high-availability distributed systems.
- Excellent written and verbal communication skills, with the ability to convey complex technical architectures and risk tradeoffs to diverse stakeholders.
Preferred Qualifications
- Master’s Degree or PhD in Computer Science, Computer Engineering, Information Security, or a related field.
- Direct experience architecting and operating large-scale bot defense, edge security, SASE/ZTNA frameworks, or volumetric DDoS mitigation systems in global, high-traffic production environments.
- Hands-on experience deploying AI/ML models into edge production systems for threat detection and real-time network enforcement.
- Familiarity with real-time data streaming technologies (e.g., Kafka, Apache Flink) and low-latency feature stores.
- In-depth experience evaluating and integrating third-party edge security vendor platforms and challenge mechanisms.
- Strong understanding of relevant industry frameworks, compliance mandates, and network auditing standards (e.g., NIST CSF, ISO 27001, SOC 2).
For San Francisco, CA-based roles: The base salary range for this role is USD $267,000 per year - USD $297,000 per year.
You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.