Uber engsec
Those at Uber, there seems to be a trend (via various posts) of negativity towards engsec. Can anyone share in more tangible details what folks might be referring to? Culture? Low quality results? Poor partners? Engineering maturity? What do you think are some of the root causes? Have you noticed a positive trajectory of improvement recently? Are you a customer of the team or a part of it?
Engineering Security?
Biggest and main problem is the toxic leadership. The CISO runs the place with a few cronies and it is a reverse meritocracy. Culture and culture scores are among the rock bottom. Frequent direction changes, intolerance for any diverse views, high attrition and low morale. Hope this helps. Run away from this dumpster fire.
EngSec at Uber has come a long way. The speed of growth and complexity of the business put a lot of strain on them. Generally, the culture has improved. Recent hires have been great and I enjoy working with them.
They want leaders and don’t require EM Security leaders to have security experience or background.
Not true.
I literally had a recruiter post on LinkedIn that a security background isn’t needed for the role they had open.
OP, it seems you got accurate responses early on however IMHO the characterization has been significantly diluted. This org particularly the leader and many other senior managers are among the worst at Uber. Then you have sight who may or may not be a recruiter but is sounding like one. Very misleading. However most eye opening part of this thread is the experience of the person from Coupang. I am not surprised- it is how they operate. Very desperate to hire because the image of Engsec preceded it. Feel free to message.
I am no recruiter. Not in EngSec either, but work closely with them.
Culture, Results, Maturity all are problems however as prospective employee you should care about two red flags. almost nothing is positive. Leadership is very immature and full of favoritism. I work at Engsec. On my way out soon.
Can confirm everything negative said here. Some examples of bad work culture: - Promos given to people who threaten to leave/have competing offers. Nowhere close to a meritocracy as others have said. - Everyone who the ciso brought from fb has left. That was after he downleveled a bunch of them. - Shitshow that was goldstar - so badly done, ciso had to tell all of eng not to use it. People actually got promoted, not fired, off that project. No wonder eng wanted (and got) their own infra security team and told engsec to f*** off. - Started/Named a bunch of random teams to sound "innovative". "Guidance" and "Access Insights" and "Vulnerability Discovery" and bleh.
The CISO has harassed multiple employees but no action is taken because he is highly skilled at managing up
What is engsec?