Security Engineer

RLINK SOLUTIONS LLC • Sunnyvale, CA

2d • Hybrid

About The Position

As a contract Security Engineer on Uber’s Security Review Team, you will proactively identify and reduce security and privacy risks across critical services, third-party platforms, and emerging AI technologies. The role focuses on reviewing engineering proposals and ERDs, building automation to scale security assessments, and conducting hands-on adversarial testing of AI agents. You will partner with engineering, security, and privacy teams to turn findings into practical design improvements and reusable security controls. The position is hybrid in Sunnyvale, California or Seattle, Washington, with flexible work-from-home options, and has a stated duration of 06+ months.

Requirements

• At least 5 years of relevant professional experience, including at least 3 years in security engineering or a related security role.
• Experience conducting security design reviews, threat modeling, and privacy risk assessments.
• Hands-on penetration testing experience and a strong understanding of application, API, cloud, and data security.
• Software development or scripting experience, with the ability to build tools and automate security workflows.
• Familiarity with AI agent architectures and risks involving prompt injection, tool execution, permissions, and data access.
• Strong written and verbal communication skills, including the ability to explain risks and recommend practical mitigations.
• Ability to work independently with minimal supervision and collaborate across engineering, security, and privacy teams.
• Bachelor’s or master’s degree in computer science, cybersecurity, or a related field, or equivalent practical experience.

Nice To Haves

• Experience assessing AI agents, LLM applications, or third-party AI platforms.
• Experience building AI-powered security review or testing automation.
• Experience evaluating vendor security readiness and handling sensitive or business-critical data.
• Relevant security certifications, such as OSCP or CISSP.
• A passion for learning, teaching, and improving security practices.

Responsibilities

• Conduct security and privacy reviews of engineering proposals, architecture, and data flows across applications, APIs, cloud infrastructure, and AI systems; identify risks involving authentication, authorization, sensitive data handling, data minimization, retention, and third-party sharing.
• Perform threat modeling to identify potential abuse cases and attack paths, recommend mitigations, and work with engineering teams to address risks before deployment.
• Assess third-party and internally developed coding and work-focused AI agents through adversarial testing, examining prompt injection, tool use, permissions, data access, sensitive data exposure, and external integrations.
• Develop tools and AI-assisted workflows to streamline ERD reviews, threat modeling, evidence collection, and security testing, increasing assessment coverage and consistency.
• Conduct targeted penetration testing to validate security assumptions and identify exploitable vulnerabilities in critical services, applications, APIs, and AI agents.
• Communicate actionable findings, validate fixes, and develop guidance to help teams prevent recurring security and privacy issues.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level