Sr Security Engineer - DDOS and Bot Defense

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our teams are responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for the Uber Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.

We are seeking a Senior Security Engineer to join our Network Security team, with a primary focus on Bot Defense and DDoS Mitigation. In this role, you will help design, build, and optimize scalable network security systems, algorithms, and automated defense mechanisms to protect our global services against automated threats, volumetric attacks, and malicious bot activity. You will work closely with cross-functional teams to enforce policies, improve real-time threat detection, and maintain system resilience at scale.

Design, implement, and scale distributed backend systems and real-time algorithms to detect, prevent, and mitigate automated bot attacks and volumetric DDoS threats targeting edge and network infrastructure.

Leverage real-time streaming frameworks and machine learning capabilities to process network telemetry, identify traffic anomalies, and mitigate threats.

Automate and enforce network access controls, segmentation policies, and edge security configurations using Terraform.

Improve security visibility, logging, and metrics within container-based and cloud-native environments.

Monitor network traffic and security dashboards to respond to ongoing security incidents, partner with internal engineering teams on threat resolution, and embed security best practices across services.

Drive technical quality through rigorous code and design reviews, establish operational runbooks, and mentor junior engineers within the team.

Bachelor’s Degree or equivalent in Computer Science, Engineering, Mathematics, or a related field.

5+ years of professional full-time experience in software engineering, cybersecurity, or network security engineering.

Proficiency in at least one production programming language: Go, Java.

Deep understanding of network protocols and concepts, including TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs, and network segmentation.

Experience with cloud technologies (e.g., AWS, GCP, OCI) and containerization (e.g., Docker, Kubernetes).

Direct experience in network security, cybersecurity, bot detection, or DDoS mitigation at scale.

Hands-on experience incorporating AI/ML models into production systems and working with real-time streaming frameworks (e.g., Apache Flink, Kafka).

Experience with Secure Access Service Edge (SASE) platforms (e.g., Zscaler).

Relevant security certifications (e.g., CISSP, CCNP) are a plus.