Sr Security Technologist - Human Risk Management

Uber; Seattle (WA); Hybrid; USD 180,000 - 200,000; Full time

Benefits offered by this job

Bonus program

Equity

401(k) plan

Benefits

Job summary

Uber's Human Risk Management team leads security learning and awareness across the organization. As a Senior Security Technologist, you will build and run Uber's security learning program, using an annual calendar and threat themes to craft a risk-based curriculum and campaigns.

You will define measurable objectives, develop training content, and assess behavioral impact while collaborating with Security, Communications, and Learning & Development teams.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Experience owning an enterprise-scale training or awareness program.
• Hands-on instructional design with measurable objectives and assessments.
• Internal communications able to write for technical and non-technical audiences.
• Knowledge of phishing, social engineering, and insider risk.

Responsibilities

• Own the security awareness curriculum and plan modules and dependencies.
• Develop complete training modules with scripts, storyboards, and assessments.
• Create content for elevated-risk audiences and localization-ready materials.
• Package modules for Uber's learning platform with SCORM/xAPI formats.
• Measure engagement and assessment performance and tie to outcomes.

Skills

Security awareness

Instructional design

Adult learning

Content development

Stakeholder interviews

Education

Bachelor's degree in Instructional Design or related field

Tools

SCORM

xAPI

LMS

Job description

About the Role

Uber's Human Risk Management (HRM) team helps people recognize and reduce security risk through training, communications, and behavior change.

As a Senior Security Technologist within Engineering Security, you will build and run Uber's security learning and awareness program. Using an established annual communications calendar and prioritized threat themes, you will develop a risk-based curriculum, prepare campaigns ahead of schedule, and tailor content to the audiences who need it.

This role combines security expertise with hands-on instructional design and adult learning experience. You will define measurable learning objectives, create effective training, and use data to assess whether it changes behavior. You will also identify when a control, process, or tooling change would address risk more effectively than awareness.

What You'll Do

• Own the security awareness curriculum, mapping risk topics to audiences, delivery formats, schedules, and module dependencies.
• Develop complete training modules, including scripts, storyboards, interactive content, and assessments tied to measurable learning objectives. Maintain an assessment bank with documented answers and rationale.
• Create targeted content for elevated-risk audiences, including engineering, finance, executive support, and new joiners.
• Produce accessible, localization-ready content that meets Uber's standards. Package modules for Uber's learning platform, using formats such as SCORM or xAPI, and validate completion and score reporting.
• Deliver campaigns ahead of the annual communications calendar, adapting content for email, Slack, intranet, digital signage, manager talking points, and short-form video.
• Tailor messaging for technical and non-technical audiences while maintaining a consistent narrative. Own reusable message libraries, style and tone guides, and campaign templates.
• Conduct structured stakeholder interviews to understand role-based risks, control friction, misconceptions, and effective communication channels. Maintain audience and threat-to-message maps to connect content to risks and identify coverage gaps.
• Identify risks that require changes to controls, processes, or tooling, and route findings to the responsible teams.
• Measure engagement, completion, assessment performance, and behavioral outcomes. Connect results to signals from phishing simulations, identity, endpoint, and security reporting systems to improve the program and inform executive reporting.
• Partner with Security, Communications, Learning and Development, People, and business teams to reflect policies, incidents, and emerging threats in program content.
• Evaluate and adapt licensed third-party content for Uber where rights permit.
• Use approved AI tools to accelerate content development, assessments, audience variants, localization preparation, and analysis.

Basic Qualifications

• Bachelor's degree in Instructional Design, Education, Communications, Information Security, or a related field, or equivalent practical experience.
• Experience in security awareness, human risk management, instructional design, or learning and development, with ownership of an enterprise-scale training or awareness program.
• Hands-on instructional design and adult learning experience, including measurable learning objectives, aligned assessments, and finished content such as scripts, storyboards, and e-learning interactions.
• Internal communications experience, with the ability to write clearly for technical and non-technical audiences and communicate results to security leadership.
• Working knowledge of security awareness and human risk management, including phishing, social engineering, credential handling, data handling, and insider risk.
• Experience with learning management systems and content packaging standards such as SCORM or xAPI.
• Experience conducting structured stakeholder interviews and translating findings into documented audience needs and content requirements.
• Experience using engagement, completion, or assessment data to improve content.
• Familiarity with AI-assisted content development and analysis.
• Ability to work independently, manage a production calendar, and adapt to changing priorities.

Preferred Qualifications

• Experience running a security awareness or human risk program in a large, decentralized engineering or technology organization.
• Experience with phishing simulation platforms, human risk scoring, or behavioral security analytics.
• Experience with accessibility standards such as WCAG 2.1 AA and preparing content for localization.
• Experience authoring or maintaining security policies, standards, and procedures aligned with recognized control frameworks.
• Experience managing editorial operations, including style guides and message libraries, or producing video, short-form content, and digital signage.
• Scripting or automation experience, such as Python, to process learning data, generate content variants, or integrate systems.
• Security certifications such as SSAP or Security+, or learning credentials such as CPTD or certifications from ATD.
• Ability to balance program delivery with long-term strategy.

Why Uber?

You will own a program with company-wide reach, helping employees, contractors, and partners make better security decisions. Working across Security, Communications, Learning and Development, Legal, and executive leadership, you will shape how Uber manages human risk at global scale.

We value curiosity, thoughtful problem-solving, collaboration, and continuous learning. We welcome candidates from different backgrounds and industries and encourage you to apply even if you do not meet every qualification.

For San Francisco, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

Ready to Ride?

This isn't the kind of place where you follow a playbook - it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves - we'd love to hear from you.

You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits. (https://jobs.uber.com/en/benefits/)

Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form. (https://forms.gle/aDWTk9k6xtMU25Y5A?uclick_id=d56eb634-bfb9-455e-a50d-901b3de0490c)

Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form- https://docs.google.com/forms/d/e/1FAIpQLSdb_Y9Bv8-lWDMbpidF2GKXsxzNh11wUUVS7fM1znOfEJsVeA/viewform