Sr Security Engineer

About the Role

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our team is responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for the Uber Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners. As cybersecurity threats evolve, so do we.

In the security org, Security Response and Investigations (SRI) team is responsible for responding to security incidents and mitigating security threats across the company. The security landscape is constantly evolving, and with the adoption of ML/GenAI backed by extensive heterogeneous data, security threats are inevitably broadened. As a Sr Security Software Engineer on SRI, you will be on the ground floor, responding to security incidents, providing hands-on investigations, forensics, and response expertise, developing automation solutions, and helping shape security responses at Uber. This is a hands-on technical position tasked with investigating cybersecurity incidents on the Uber platform as well as against the business. You will solve complex puzzles, piecing together the most obscure clues, while building and communicating solid work results. You will build modern automation solutions for security response leveraging SIEM, SOAR and AI. You will have the opportunity to work on cutting-edge technologies, collaborate with cross-functional security and engineering teams, and play a key role in shaping our cybersecurity strategy.

---- What the Candidate Will Do ----

• Conduct rapid response, mitigation, investigations and forensics on highest priority incidents impacting Uber and user data.
• Partner with global team members to drive response and investigations globally.
• Partner closely with incident commanders, leading incident investigations.
• Produce concise yet thorough case reports for internal and external stakeholders.
• Lead automation projects and develop automation to improve the consistency and efficiency of incident response leveraging GenAI.
• Lead projects/initiatives to help mature the incident response program and reduce cybersecurity risk at Uber and Uber’s subsidiaries.
• Support and mentor others on automation development.

---- Basic Qualifications ----

• Bachelor's degree in Computer Science, Engineering, Cybersecurity or a related field
• 5+ years of hands-on experience on a security engineering team or a software engineering team building security solutions.
• Proficiency in at least one of the following programming languages: C++, Java, Python, or Go
• Strong foundation in security principles.
• Cybersecurity knowledge across multiple domains such as network, hosts, applications, data, cloud etc.
• Familiarity with common threat actor attack patterns and TTPs.
• Strong problem-solving skills.

---- Preferred Qualifications ----

• Master’s or PhD degree in Computer Science, Engineering, or a related field
• Experience with cybersecurity forensic methodologies and software.
• Experience driving complex incidents or leading large investigations end-to-end.
• Experience with building automations for incident response.
• Experience leading large-scale threat hunts.
• Applied knowledge of cyber intel frameworks such as ATT&CK framework and kill-chain model.
• Experience working crisis events for a global company. Ability to work across geographically distributed teams.
• Certifications in Security is a plus.

For San Francisco, CA-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.

For Seattle, WA-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD$194,000 per year - USD$215,500 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. You will also be eligible for various benefits. More details can be found at the following link https://www.uber.com/careers/benefits.

Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.

Offices continue to be central to collaboration and Uber’s cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.