Senior Software Engineer - Application Security

About The Role

Uber is seeking a Senior Software Engineer to join our Application Security team as we evolve our defensive capabilities through advanced automation. You will help scale the traditional AppSec model of finding vulnerabilities manually to a fully automated and autonomous system. In this role, you will be tasked with designing, implementing, and deploying security automation that secures AI implementations within our applications and leverages model-driven analysis to detect security vulnerabilities-such as XSS, SQLi, CSRF, and SSRF-across Uber's entire organization.

You will use your software engineering skills to raise the security bar across all mobile and web apps at Uber while exploring the use of automation to generate exploits and validate vulnerabilities at scale. This is a unique opportunity to work with all levels of engineers, making a real impact on Uber's security posture and up-leveling your own engineering skills while building specialized security knowledge. Note: you will have access to unlimited model usage for your work!

• What the Candidate Will Do
• Design end-to-end features and autonomous systems for Agent & MCP Security, Code Scanning, and Vulnerability Remediation applications.
• Develop security automation capable of identifying vulnerabilities and performing automated exploit validation across Uber's microrepository landscape.
• Collaborate and consult with multiple engineering teams and stakeholders from Privacy, Security, Compliance, Infrastructure, and Product for integration into our security platforms.
• Design and develop new systems, such as automated security scoring and repository-to-service mapping, to empower fast, data-driven security decisions.
• Build distributed backend systems, including workflows, that serve real-time analytics and security features at Uber scale.
• Mentor junior engineers and lead technical design reviews for high-impact security projects.
• Basic Qualifications
• Understanding of Agents, MCP servers, and LLMs
• BS/BE degree in Computer Science or related fields.
• 5+ years of experience in software engineering.
• Experience building applications from end to end.
• Hands-on experience with Go, Java, C, or Python (Uber heavily utilizes Go).
• Deep knowledge of datastore technologies, including RDBMS and NoSQL systems.
• Experience implementing REST or gRPC APIs.
• Service design and architecture experience.
• Implementation of secure system design, including authentication, authorization, and encryption.
• Preferred Qualifications
• Experience with distributed messaging systems such as Kafka and building real-time data pipelines.
• Experience designing, implementing, and deploying production-quality systems with high availability.
• Experience building integrations with open source and vendor products.
• Familiarity with securing agentic workflows within software applications.
• Master's in Computer Science, Engineering, or a related field.

For Seattle, WA-based roles: The base salary range for this role is USD$202,000 per year - USD$224,000 per year. You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.