Sr. Security Engineer

About the Team:

The security organization at Uber is dedicated to enabling safe and secure innovation while protecting the communities we serve both online and in the physical world. Our team is responsible for protecting both people and their data across intersections of the digital and physical world. The primary objective for Uber’s Engineering Security team is to enable the technical ambitions of the company while maintaining the highest standards of security and privacy for our customers and partners.

As cybersecurity threats evolve, so do we.

Our mission is to protect, defend, and secure Uber’s products, infrastructure and data by building highly available, scalable and extensible security solutions and services. We are focused on proactively identifying and remediating security risks as well as swiftly detecting and mitigating security incidents. In the ever-evolving landscape of cybersecurity, we continuously adapt and evolve our defenses in order to always stay one step ahead of potential threats.

We are seeking a talented and experienced Sr. Staff Security Engineer to join our Cyber Defense team and lead the development of the next generation security platform. This platform will be instrumental in enhancing our cyber defense capabilities across security posture management, threat detection, incident response, and more. The security landscape is constantly evolving, and with the adoption of ML/GenAI backed by extensive heterogeneous data, security threats are inevitably broadened.

With your deep and comprehensive expertise across major technology stacks, you will lead major effortstodesign, implement and scale industry-leading security solutions for cyber defense. You are not only role models, but also empathic leaders. You are humble teachers, technically mentoring passionate engineers while also delivering uniquely challenging projects. You will have the opportunity to work on cutting-edge technologies, collaborate with cross-functional security and engineering teams, and play a key role in shaping our cybersecurity strategy.

• Lead the technical direction and architecture of our cyber security defense capabilities, including areas such as enterprise security posture management, threat detection and response, and vulnerability management.
• Design and implement robust and scalable security solutions leveraging a diverse range of technologies (e.g., SIEM, EDR, SOAR, cloud security platforms, IAM).
• Lead incident response efforts, including investigation, containment, and recovery activities. Perform post-incident analysis and recommend improvements to prevent future occurrences.
• Proactively research and evaluate emerging security threats, technologies, and trends, and provide recommendations for their adoption to enhance our security posture.
• Collaborate effectively with cross-functional teams, including Engineering, IT, Legal, and Compliance, to integrate security considerations into the development lifecycle and business processes.
• Mentor and provide technical guidance to junior security engineers, fostering a culture of continuous learning and growth within the team.
• Contribute to the development and automation of security tools and processes to improve efficiency and effectiveness.
• Communicate complex security concepts and risks effectively to both technical and non-technical audiences.
• Participate in security audits and compliance initiatives, providing technical expertise and ensuring adherence to security standards.

• Bachelor’s Degree or equivalent in Computer Science, Engineering, Information Security or related field
• 10+ years full-time work experience in security engineering, with a strong focus on security defense and incident response.
• Deep technical expertise in multiple security domains, such as network security, endpoint security, cloud security (GCP, OCI, Azure, AWS), and identity and access management.
• Strong scripting and automation skills (e.g., Python, Power Shell, Bash, Golang) are highly desirable.
• Proven experience designing, implementing, and managing complex security solutions at an enterprise level.
• Excellent analytical and…