Manager II, Security Incident Command

About the Role

Uber’s Incident Command team, part of the Threat Defense and Response (TDR) organization, leads the coordination and response to the company’s highest-severity cybersecurity incidents, spanning threats, vulnerabilities, insider risks, and large-scale fraud.

The team operates at the intersection of security, reliability, and engineering - across both digital and physical domains - applying disciplined incident management practices to complex, high-impact events.

In this role, you will not only lead incident response but also drive its evolution by building and integrating automation and AI-powered systems across response, post-incident review, and proactive readiness programs.

You will partner closely with Security, Infrastructure, Product, and Business teams to build a scalable, intelligent incident response ecosystem.

Ultimately, you will help define how Uber responds to and prevents incidents - designing systems that augment human decision-making and strengthen resilience across the company.

---- What the Candidate Will Do ----

1. Incident Command Leadership
2. Lead a global team of incident commanders managing Uber’s highest severity security incidents
3. Drive structured, effective coordination across engineering, security, and business teams during high-impact events
4. Partner with Security, Legal, and Privacy on sensitive incidents requiring careful judgment and handling
5. Evolve incident management practices by integrating security IR and SRE/Ring0 disciplines
6. Proactive Programs
7. Own postmortem, premortem, and incident simulation programs to improve resilience and organizational readiness
8. Translate external incidents and emerging threats into actionable risk reduction across Uber
9. Engineering & AI Transformation
10. Build and integrate automation and AI-driven capabilities into incident response, postmortems, premortems, and incident simulations
11. Translate incident processes into scalable systems, defining safe automation boundaries and human-in-the-loop decision frameworks
12. Team & Culture
13. Mentor and grow incident commanders in leadership, decision-making, engineering, and operational excellence
14. Foster an inclusive, high-performing culture grounded in accountability, learning, and continuous improvement

---- Basic Qualifications ----

1. 8+ years of experience in one or more of the following:
2. Security incident response
3. Production incident management (e.g., SRE, Ring0, reliability engineering)
4. Security or infrastructure operations
5. Experience leading or coordinating high-severity incidents in a complex, distributed environment
6. Experience serving as an incident commander, incident lead, or equivalent leadership role during critical incidents
7. Strong systems thinking: ability to navigate incidents across infrastructure, applications, and services
8. Excellent communication and stakeholder management skills, especially under pressure
9. Experience mentoring or managing engineers or operational responders

---- Preferred Qualifications ----

1. Background in cybersecurity incident response or strong demonstrated ability to quickly ramp in security domains
2. Experience leading complex, cross-functional incidents end-to-end, including coordination across engineering, security, legal, and business teams
3. Experience building or improving incident management programs (e.g., postmortems, simulations, escalation/decision frameworks)
4. Experience designing or implementing automation, platforms, or AI-driven solutions in operational workflows
5. Familiarity with security concepts such as threats, vulnerabilities, or attacker behaviors (e.g., MITRE ATT&CK)
6. Experience operating in global, distributed environments with follow-the-sun models

For New York, NY-based roles: The base salary range for this role is USD$232,000 per year - USD$258,000 per year.

For San Francisco, CA-based roles: The base salary range for this role is USD$232,000 per year - USD$258,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD$232,000 per year - USD$258,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD$232,000 per year - USD$258,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.

Uber's mission is to reimagine the way the world moves for the better. Here, bold ideas create real-world impact, challenges drive growth, and speed fuels progress. What moves us, moves the world - let's move it forward, together.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.

Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.