Staff Security Engineer - Engineer

Staff Security Engineer - Network Security (Bot Defense & DDoS)

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world.

Our teams are responsible for protecting both people and their data across intersections of the digital and physical world.

The primary objective for the Uber Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners.

As cybersecurity threats evolve, so do we.

We are seeking a Staff Security Engineer to join our Network Security team.

In this role, you will define and build systems that improve bot detection and mitigation, and DDoS protection at a global scale.

You will architect, build, and scale Uber’s next-generation edge security infrastructure to safeguard our systems from volumetric attacks and evolving automated threats.

As an L5b Staff Engineer, you will set technical roadmaps, drive cross-functional alignment across teams, evaluate and partner with key external vendor platforms, and serve as an empathetic technical mentor.

• Architect, implement, and scale high-performance, distributed backend systems for real-time bot detection and mitigation, and volumetric DDoS defense.
• Drive technical strategy for AI/ML-driven threat defense, integrating ML inference pipelines and real-time streaming frameworks into network edge production environments.
• Evaluate, integrate, and partner with third-party vendor platforms to enhance threat detection coverage and deploy challenge capabilities.
• Build end-to-end data pipelines and low-latency feature stores supporting both real-time network enforcement and batch threat intelligence.
• Establish engineering standards, conduct system architecture reviews, and technically mentor junior engineers within the Network Security team.
• Collaborate with cross-functional engineering teams to define security KPIs, design large-scale experimentation frameworks, and continuously measure defense efficacy.

• Bachelor’s degree in Computer Science, Engineering, Mathematics, or a related field.
• 8+ years of experience in backend software development or platform engineering.
• Proficiency in at least one production programming language: Go, Java
• Strong experience in backend software architecture design and distributed systems.
• Experience with cloud technologies (e.g., AWS, GCP, OCI) and containerization (e.g., Docker, Kubernetes).

• Direct experience in network security, cybersecurity, bot detection, or DDoS mitigation at scale.
• Experience evaluating, integrating, and managing third-party vendor solutions for bot challenge techniques and edge threat mitigation.
• Hands-on experience incorporating AI/ML models into production systems and working with real-time streaming frameworks (e.g., Apache Flink, Kafka).
• Proven track record of leading complex, multi-team software initiatives from inception to delivery.