Security Technologist I

About the Role

Uber's Security Response and Investigations (SRI) team is the cybersecurity incident response body at Uber. SRI responds to security incidents and mitigates security threats across the company. As a Security Technologist on SRI,

1. You will be on the front-line of defence for the Uber Security Incident Response program by handling triage and investigations for all security alerts for Uber globally across all environments (on-prem and clouds).
2. You will build Standard Operating Procedures (SOP) and help improve the incident response program.
3. You will build automation workflows to increase incident response efficiency and consistency
4. You will serve as an incident coordinator during high and critical severity incidents.
5. You will do the Threat Hunts to identify the potential threats to Uber
6. Expect to work weekend shift (Saturday / Sunday)

What the Candidate Will Need / Bonus Points

---- What the Candidate Will Do ----

1. Conduct rapid response, mitigation, investigations and forensics on highest priority incidents impacting Uber and user data.
2. Partner with global team members to drive response and investigations globally.
3. Partner closely with incident commanders, leading incident investigations.
4. Produce concise yet thorough case reports for internal and external stakeholders.
5. You will build automation workflows to increase incident response efficiency and consistency
6. You will serve as an incident coordinator during high and critical severity incidents.
7. Expect to work weekend shift (Saturday / Sunday)

---- Basic Qualifications ----

1. Graduate in Computer Science or CyberSecurity
2. Understanding of cybersecurity fundamentals including network protocols (e.g. TCP/IP stack) and security, system security, and email security;
3. Security monitoring and response in a SOC/SecOps environment;
4. Cyber intel frameworks such as ATT&CK framework and kill-chain model;
5. Digital Forensic and Incident Response; SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, Response) tools;
6. SOAR automations & scripting
7. Understanding of Cloud Infra Skills (such as AWS and GCP) and leveraging Agentic AI (including an understanding of MCP servers).

---- Preferred Qualifications ----

1. Experience with cybersecurity forensic methodologies and software.
2. 1+ years of hands-on experience in a cybersecurity role.
3. Experience driving complex incidents or leading investigations end-to-end.
4. Threat hunting and Automation experience (SOAR/Python).
5. Experience working crisis events for a global company. Ability to work across geographically distributed teams.
6. Certifications in Security is a plus.
7. Degree in Cybersecurity

For San Francisco, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD$133,000 per year - USD$140,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.

Uber's mission is to reimagine the way the world moves for the better. Here, bold ideas create real-world impact, challenges drive growth, and speed fuels progress. What moves us, moves the world - let's move it forward, together.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.

Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.