Sr Network Security Operations Engineer

About the Role

The Network Security team at Uber works to reduce the risks caused by insecure configurations, devices, and processes across Uber and it's subsidiaries across multiple environments and device types. Our team is on the frontlines, working hand and hand with our partners, blocking threats from a variety of actors and software.

What You'll Do

1.  Lead efforts with our Corporate, Platform Production, and Subsidiary Network Engineer teams to keep our network security platforms running smoothly and tackle any integrations to these systems

2.  Lead the definitions and quality of reviews around ACL, proxy, load balancer, and firewall changes

3.  Lead projects improving our monitoring, alerting, and response for our services

4.  Work with our Threat Detection and Response teams to improve visibility and response integrations into our services

5.  Work with our SWE team to create automations and services to ensure better visibility and compliance with our team's requirements

6.  Continue to update and push our ZTNA roadmap

7.  Maintain, monitor, and upgrade our developed services

Basic Qualifications

1.  10+ years of large, scalable and resilient Network Security Engineering and operations experience

2.  5+ years of engineering experience with Arista, Cisco, and/or Juniper Firewall administration

3.  5+ years of experience working with reverse proxies (ie: NGINX, Envoy, Apache)

4.  5+ years of experience with a SD-WAN design, deployment and management

5.  5+ years of experience working with any SASE/SSE endpoint protection service (ie: ZScaler, iBoss, etc.)

6.  3+ years of professional software development in Python3 and/or GoLang experience to be able to automate common tasks

7.  Experience working with hybrid cloud environments

8.  Experience working with Network Incident Security response methods, techniques, and legal requirements for collection and preservation of artifacts

9.  Working knowledge and experience managing/administering of optical and traditional encrypted tunnel systems and protocols (ie: IPSEC, Wireguard, OpenVPN, Layer 4 SSL) as well as MacSec

10.  Working understanding of Regex

11.  Working understanding of Threat Modelling and Threat Zoning

12.  Working understand of PCI, GDPR, NYDFS, and CCPA

13.  Strong interpersonal skills for multi-functional and cross-organizational project team management

14.  Network Access Control (NAC) and 802.1X PEAP experience

15.  Zeek, Suricata, and other Network Security Monitoring platforms experience

16.  Wireguard and MACSEC experience

17.  Envoy reverse proxy experience

Preferred Qualifications

1.  ZScaler Internet Security platform experience

2.  OpenConfig Experience / Understanding

3.  Experience with Batfish Open Source Network Analyzer

4.  Working understanding of eBPF and XDP with module development experience and understanding of eBPF CNI’s such as Cilium

We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have the curiosity, passion, and collaborative spirit, work with us, and let’s move the world forward, together.

Offices continue to be central to collaboration and Uber’s cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.

*Accommodations may be available based on religious and/or medical conditions, or as required by applicable law. To request an accommodation, please reach out to accommodations@uber.com.