Senior Incident Command Tech Lead

Uber Technologies Inc.; Seattle, San Francisco, Sunnyvale (WA, CA, CA); On-site; USD 180,000 - 200,000; Full time

Benefits offered by this job

Bonuses

Equity

Benefits

Job summary

Uber Technologies Inc. seeks a Senior Security Technologist, Incident Command, to lead Uber's most high‑impact security incidents end‑to‑end—from escalation to containment, recovery, and systemic remediation.

You will set strategy, allocate resources, and make critical decisions under pressure. You will drive deep technical investigation, post‑incident analysis, and the evolution of detection, containment, and automation, collaborating with engineering, legal, privacy, and operations teams

Qualifications

• 5+ years in security operations, detection, or incident response roles at scale, with ownership of large incidents.
• Deep familiarity with modern attacker TTPs and their manifestation across logs, systems, networks, endpoints, and applications.
• Strong technical investigation skills with logs, telemetry, and raw system data to validate hypotheses.
• Experience briefing executives during active incidents, explaining risks and actions clearly.
• Experience designing or running incident simulations (tabletops, purple team) to test response.
• Experience building or leveraging AI-driven tooling to improve incident response.

Responsibilities

• Command the highest severity and most complex incidents as the accountable leader during active response.
• Participate in on-call rotations with real-time decision making under uncertainty.
• Set strategy, allocate resources, and direct investigative focus during incidents.
• Lead from executive interfaces, translating technical realities into risk and decision frameworks.
• Build relationships with global engineering, infrastructure, legal, privacy, and operations teams for coordinated response.
• Conduct rigorous post-incident analysis focused on systemic causes and prevention.
• Mentor responders and advance Uber's incident response program through simulations and tooling improvements.
• Lead adoption of new investigative techniques and AI-assisted workflows.

Skills

Security operations

TTPs knowledge

Investigation skills

Executive briefing

Incident simulations

AI tooling

Job description

Uber Technologies Inc. seeks a Senior Security Technologist, Incident Command, to lead Uber's most high‑impact security incidents end‑to‑end—from escalation to containment, recovery, and systemic remediation.

You will set strategy, allocate resources, and make critical decisions under pressure. You will drive deep technical investigation, post‑incident analysis, and the evolution of detection, containment, and automation, collaborating with engineering, legal, privacy, and operations teams