Security Incident Respondent & Forensics Automation

Uber; United States; On-site; USD 153,000 - 170,000; Full time

Benefits offered by this job

Bonuses

Equity

Benefits

401(k)

Job summary

Uber's CyberSecurity Incident Response team (CIRT) is a hands-on, fast-paced group protecting a global platform. As a Security Analyst, you will be a key player in incident response, investigations, and building automated defenses across Uber.

You will triage threats, perform digital forensics, develop automation with SIEM/SOAR, and collaborate with security and engineering teams to strengthen our security posture, while clearly communicating findings to influence long-term strategy.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 3+ years in a security-focused role (IR, Sec Ops, or Digital Forensics).
• Proven incident response experience in a professional environment.
• Familiar with SIEM, EDR, and network monitoring.
• Scripting in Python or Bash for automation and analysis.
• Strong problem-solving skills and clear communication.

Responsibilities

• Responding to security incidents and mitigating threats across the company.
• Conducting investigations and forensics to determine root cause, scope, and impact.
• Developing automation using SIEM/SOAR to improve response capabilities.
• Collaborating with security and engineering teams to address vulnerabilities.
• Communicating findings to shape long-term security strategy.

Skills

Incident Response

Security Operations

Digital Forensics

Python

Bash

SIEM

EDR

Network Monitoring

Communication

Education

Bachelor's degree

Tools

SIEM

EDR

Network Monitoring

Job description

Uber's CyberSecurity Incident Response team (CIRT) is a hands-on, fast-paced group protecting a global platform. As a Security Analyst, you will be a key player in incident response, investigations, and building automated defenses across Uber.

You will triage threats, perform digital forensics, develop automation with SIEM/SOAR, and collaborate with security and engineering teams to strengthen our security posture, while clearly communicating findings to influence long-term strategy.