[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Uber jobs](https://jobs.opennash.com/companies/uber/) · [Search jobs](/search/)

Uber · Seattle, WA

# Staff Security Engineer - Vulnerability Management

Seattle, WA, United States Full-time Senior individual contributor $232,000 per year Security 

Listed on Uber’s official careers site. Posted July 27, 2026. Check that it is still open and apply there.
[Apply on Uber’s careers site →](https://iaziqy.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/UberCareers/job/157227)

[OpenNash Jobs](https://jobs.opennash.com/) / [Uber](https://jobs.opennash.com/companies/uber/) / Staff Security Engineer - Vulnerability Management

## Job description

About the Role Our mission is to protect, defend, and secure the company's products, infrastructure, and data by building highly available, scalable, and extensible security solutions and services. We are seeking a Staff Security Engineer, Vulnerability Management to lead the evolution of our Vulnerability Management Platform. In this role, you will architect the next generation of our Risk-Based Vulnerability Management (RBVM) systems, transforming how we identify, prioritize, and remediate exposure across a massive digital footprint.

You will drive technical excellence across our vulnerability management landscape, from on-prem, cloud, container security to corporate endpoint hygiene. As a Staff Engineer, you will be a technical visionary and mentor, leading the transition toward Continuous Threat Exposure Management and AI-driven remediation workflows that operate at enterprise scale.

### What You Will Do

RBVM Platform Architecture: Design and scale Security Posture Management tools and platforms to provide a unified, risk-scored view of vulnerabilities across on-prem, cloud, containers, VMs, and endpoints.

### Automation & Orchestration

Build automated remediation workflows and systems that will reduce median response times for emerging threats and scale across decentralized teams.

### Technical Strategy

Lead "Shift-Left" initiatives by integrating vulnerability scanning into development workflows, CI/CD pipelines, and infrastructure provisioning to enforce security policies consistently across all asset types, including cloud resources, endpoints, and applications.

### AI/ML Innovation

Leverage LLMs and AI agents for automated triage, impact analysis, and generating context-aware remediation instructions for service owners across the infrastructure.

### Vulnerability Governance

Partner with Compliance and IT to mature vulnerability standards, SLAs, and risk exception processes across the global digital estate.

### Vulnerability Analysis

Provide deep security subject matter expertise to analyze complex vulnerabilities, assess true risk, and drive informed decisions on remediation verdicts, false positives, and risk acceptance.

### Cross-Functional Collaboration

Partner with IT, product, and operations teams to integrate security posture improvements across the entire environment.

### Basic Qualifications

7+ years of industry experience in software development, with a focus on large-scale security or infrastructure engineering. Expertise in building distributed systems and high-availability security platforms using Golang, Java, or Python. Proven track record of designing and operating vulnerability management tools at scale. Deep understanding of container security, cloud-native infrastructure, and CI/CD pipelines. Experience leading cross-functional security initiatives and mentoring senior engineering staff.

### Preferred Qualifications

Hands-on experience developing Risk-Based Vulnerability Management (RBVM) frameworks and automated prioritization logic. Knowledge of AI/ML applications in security, specifically for vulnerability triage or large-scale data analysis. Experience with External Attack Surface Management (EASM) and tracking internet-facing asset exposure. Familiarity with Software Supply Chain Security (SSCS), including SBOM and internal package registries.

## Responsibilities

### For New York City, NY-based roles

The base salary range for this role is USD $232,000 per year - USD $258,000 per year.

### For Sunnyvale, CA-based roles

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

## At a glance
- Posted by the employer: Jul 27, 2026
- First seen by OpenNash: Oct 19, 2026
- Last checked: Oct 19, 2026
- Listed for: 84 days
- Location: Seattle, WA, United States
- Employment type: Full-time
- Pay: $232,000 per year[Apply on Uber’s careers site →](https://iaziqy.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/UberCareers/job/157227)

## More jobs at Uber

### [Sr Manager, Security Engineering - Engineer](https://jobs.opennash.com/companies/uber/jobs/dfade507000d8b4c880d/)

Seattle, WA, United States

### [Sr Security Engineer - DDOS and Bot Defense](https://jobs.opennash.com/companies/uber/jobs/ebc8046cdc7e766a92af/)

Seattle, WA, United States

### [Sr Security Technologist - Customer Trust](https://jobs.opennash.com/companies/uber/jobs/5e3539628914a6bdb694/)

Seattle, WA, United States

### [Sr Security Technologist - Mergers & Acquisitions](https://jobs.opennash.com/companies/uber/jobs/a41937a01765871f6e61/)

Seattle, WA, United States

### [Staff Security Engineer - Engineer](https://jobs.opennash.com/companies/uber/jobs/193bbf939341e9f83edd/)

Seattle, WA, United States

## Similar jobs at other companies

### [Security Engineer III](https://jobs.opennash.com/companies/jpmorganchase/jobs/ef3547918c22be76a3f9/)

JPMorganChase · Seattle, WA, United States

### [Tech Risk and Controls Lead-Vulnerability Management, Network security controls](https://jobs.opennash.com/companies/jpmorganchase/jobs/3312973a025b18698169/)

JPMorganChase · Jersey City, NJ, United States

### [Staff Cloud Security Engineer](https://jobs.opennash.com/companies/albertsons/jobs/395bf6f9560adb4a7fae/)

Albertsons · Pleasanton, CA, United States

### [Senior Staff Security Engineer](https://jobs.opennash.com/companies/qualcomm/jobs/0e2fe90ccc0d8242e73f/)

Qualcomm · San Diego, California, United States of America

### [Cyber Security Engineer Staff (Embedded)](https://jobs.opennash.com/companies/lockheed-martin/jobs/1e8e7e5895fbddfb01a3/)

Lockheed Martin · Orlando, FL, Grand Prairie, TX

[Jobs in Seattle, WA](/locations/us/wa/seattle/)[Jobs in Washington](/locations/us-wa/)[Security jobs](/functions/security/)

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)
