Threat Modeling

Threat Modeling Developer Jobs

2 jobs found

Today

Software Engineer II - Security Review Automation

Uber Seattle, WA

Seattle, WA

Today

$171k - $190k/yr Full time Backend Developer Ai Red Teaming Application Security

Apply Now

Job Description

Uber’s Offensive Security team is seeking a Software Engineer II to build security review automation and AI-powered tools for continuous, scalable security testing.

Responsibilities

Build security platforms and automation across SAST, DAST, SCA, penetration testing, AI red teaming, security design reviews, and threat modeling
Develop AI-powered agents and workflows that analyze source code and technical designs, orchestrate security assessments, generate test cases, and validate findings
Partner with security engineers to turn expertise into repeatable, scalable capabilities
Build and scale foundational infrastructure and data pipelines, balancing technical debt with shifting priorities while preserving long-term impact
Integrate security capabilities with source control, CI/CD pipelines, service inventories, and issue-tracking systems to support continuous and on-demand testing
Create shared services for assessment orchestration, findings normalization and deduplication, and remediation tracking to reduce duplicate findings and manual effort for security and engineering teams
Design, develop, and maintain high-quality code for features of moderate complexity and projects with multiple dependencies
Develop evaluation frameworks and operational safeguards for AI-driven security workflows, including accuracy, coverage, latency, and cost, plus access controls, execution boundaries, and auditability
Own the software lifecycle end-to-end, from drafting design docs to debugging production issues and managing incidents independently
Collaborate across Product, Data Science, and Ops to convert ambiguous requirements into simple, reliable system designs
Support engineering best practices through quality code reviews, comprehensive tests, and performance improvements
Navigate internal complexity and stakeholder inquiries to remove blockers and ensure production environment reliability

Requirements

3+ years of professional software engineering experience in backend development, distributed systems, or data engineering
Proficiency in one or more object-oriented or functional programming languages (examples: Go, Java, Python, C++)
Experience with data modeling, query optimization, and translating customer problems into system design
Bachelor’s Degree (or equivalent experience) in Computer Science, Engineering, or a related technical field
Experience writing tests to verify functionality and establishing monitoring systems to ensure code stability
Experience building APIs, service integrations, or automated workflows that connect multiple systems in production
Understanding of secure software development fundamentals: authentication, authorization, data protection, and safe handling of credentials
Familiarity with source control, CI/CD, and automated testing practices for reliable software delivery

Technologies

Go, Java, Python, C++
SAST, DAST, SCA
CI/CD, Spark, Flink, Kafka
LLMs

Preferred Qualifications

Experience building agentic security workflows that gather technical context, reason across multiple data sources, invoke security tools, validate conclusions, and produce evidence-backed assessments
Experience applying frontier LLMs to complex security reasoning, including architecture analysis, attack-path identification, threat enumeration, vulnerability discovery, and security control validation
Experience developing multi-agent or multi-model architectures (specialized agents, model routing, model-as-judge) to improve accuracy, coverage, and confidence
Experience identifying and reducing code-level technical debt in high-load distributed systems
Background in mentoring new team members and contributing to engineering culture
Proficiency with Big Data frameworks (e.g., Spark, Flink) or real-time streaming (e.g., Kafka)
Demonstrated ability to exercise sound judgment on engineering trade-offs for complex systems
Experience building security tools or automation in one or more domains: SAST, DAST, SCA, penetration testing, AI red teaming, security design reviews, or threat modeling
Experience developing LLM-powered applications or agentic workflows, including model integration, tool execution, context retrieval, and orchestration
Experience building evaluation frameworks for AI-driven systems, including reproducible benchmarks, regression testing, and output quality and reliability measurement
Familiarity with source-code analysis, dependency graphs, API testing, or isolated execution environments for automated security testing
Experience using AI-assisted development tools to accelerate implementation, testing, debugging, and maintenance

Location

Seattle, WA (onsite)

Compensation

Base salary range: USD 171,000 - 190,000 per year

Benefits

Eligible to participate in Uber’s bonus program (for all US locations)
May be offered an equity award and other types of compensation
401(k) plan eligibility for all full-time employees
Various benefits (details not provided)

About the Role and Team

Member of Uber’s Offensive Security team building security tools, platforms, and AI-powered automation to enable security testing and risk reduction at Uber scale
Focus on building for messy, global systems with imperfect information, end-to-end ownership, and reliability under high-load conditions

Workplace Requirements

Unless approved for full remote work, employees must spend at least 50% of their time in-office
Some roles (e.g., at greenlight hubs) may require full-time in-office presence

Education: Bachelor’s Degree (or equivalent experience) in Computer Science, Engineering, or a related technical field

Minimum Experience: 3 years

View full job page →

3mo ago

Senior Machine Learning Engineer, E-Commerce Risk Control

TikTok San Jose, CA

San Jose, CA

3mo ago Closed

$187k - $360k/yr Full time Advanced Analytics Ai Ml Analytics

This position is no longer accepting applications (closed Jul 15, 2026).

Job Description

Senior ML engineer on TikTok's E-Commerce Risk Control team focused on building and deploying models to mitigate e-commerce risks while advancing privacy, interpretability, and governance.

Responsibilities

Invent, implement, and deploy advanced machine learning algorithms, build prototypes, and explore novel solutions to mitigate business risks in TikTok e-commerce platforms, including fraudulent merchants, cheaters among influencers, malicious users, information security issues, and cross-domain risk challenges.
Utilize representation learning, graph models, deep learning, transfer learning, and multi-task learning to enhance problem detection efficiency and rapidly block risks, optimizing key metrics across the e-commerce community ecosystem.
Monitor and attribute metrics to quickly detect shifts in risk and business trends, proactively identify potential attacks, refine risk control strategies, and drive governance improvements and business model enhancements.
Mine and analyze large-scale e-commerce content and user behavior data to build short-term and long-term user profiles, improve model precision and recall, and boost robustness, automation, and generalization capabilities.
Advance risk ML capabilities in privacy, compliance, interpretability, and risk perception; develop models and algorithms tailored to content e-commerce and construct an industry-leading risk control algorithm system.

Requirements

Master’s degree in Computer Science, Mathematics, Machine Learning, or related STEM fields.
3+ years of hands-on experience building and delivering machine learning models for large-scale projects at internet companies.
Proficiency in C++/Java/Python with strong coding skills, plus familiarity with at least one common ML or deep learning platform.
Solid understanding of supervised learning, unsupervised learning, and deep learning, with the ability to build business algorithms using relevant techniques.
Analytical, data-driven mindset with the ability to work autonomously and communicate results clearly.

Technologies

Python
C++
Java
LLM

Benefits

Medical, dental, and vision insurance
401(k) savings plan with company match
Paid parental leave
Short-term and long-term disability coverage
Life insurance
Wellbeing benefits
10 paid holidays per year
10 paid sick days per year
17 days of Paid Personal Time (prorated at hire with tenure-based accruals)
Additional discretionary bonuses and incentives
Restricted stock units

About the Team

The E-Commerce Risk Control team focuses on minimizing damage from inauthentic behaviors on TikTok E-Commerce platforms, covering account integrity, incentive abuse, malicious activity, brushing, click-farms, information leakage, and related risk areas.

About USDS

TikTok USDS Joint Venture LLC is dedicated to the safety and security of Americans who create, discover, and connect with what they love on the apps we operate.
The Joint Venture was established in compliance with the Executive Order signed by President Trump on September 25, 2025.
Our foundation is a comprehensive data privacy and cybersecurity program to safeguard national security and US user data, apps, and the algorithm.
We safeguard the US content ecosystem and hold decision-making authority for trust and safety policies and moderation.
USDS Joint Venture helps ensure Americans can express creativity, discover interests, and build communities and businesses globally.
On-site presence across teams supports speed, alignment, and agility in real-time decision-making and integrated execution.
The company is shifting from a hybrid model to a fully in-person schedule up to five days a week.

Why Join Us

TikTok aims to inspire creativity by enabling authentic expression, discovery, and connection, supported by global, diverse teams.
We value curiosity, humility, and impact, treating challenges as opportunities to learn and innovate as one team, with an Always Day 1 mindset.
Diversity and Inclusion: TikTok commits to an inclusive space that values diverse voices and perspectives to reflect the communities we reach.

USDS Reasonable Accommodation

USDS provides reasonable accommodations in recruitment for candidates with disabilities or other protected reasons. If you need assistance, reach out at https://tinyurl.com/USDS-RA

Job Information

Location: San Jose, CA (onsite)
Base salary range: $187,040 - $359,720 annually
Compensation may vary based on qualifications, skills, competencies, experience, and location; base pay may be eligible for discretionary bonuses/incentives and restricted stock units
Benefits on day one include medical, dental, and vision insurance, 401(k) with company match, paid parental leave, disability coverage, life insurance, wellbeing benefits, among others
Ten paid holidays, ten paid sick days, and 17 days of Paid Personal Time, prorated on hire with tenure-based accruals
Company reserves the right to modify or change benefits programs at any time

View full job page →

Threat Modeling Developer Jobs

Software Engineer II - Security Review Automation

Senior Machine Learning Engineer, E-Commerce Risk Control

Get Threat Modeling Developer Jobs alerts