Uber
Staff Security Technologist - Incident Commander
$211K–$234K
San Francisco, California · Staff · Full-time · Posted Oct 13, 2026
- Experience
- 8+ years in security operations, detection, or incident response roles at scale.
About the job
Leads Uber’s most critical security incidents from escalation through recovery and remediation, while directing and improving the incident-response program.
What you'll do
- Command high-severity incidents, make real-time response decisions, and direct technical investigation and remediation.
- Brief senior leaders and coordinate response across engineering, security, legal, privacy, infrastructure, and operations teams.
- Lead post-incident analysis and prevention work, including simulations, response frameworks, threat modeling, and reusable automation.
What they ask for
- 8+ years in security operations, detection, or incident response at scale, including ownership of complex incidents and multi-team programs.
- Deep incident-response expertise, knowledge of attacker TTPs, and ability to investigate logs, telemetry, and raw system data to determine root cause.
- Experience briefing executives during incidents and aligning technical and non-technical stakeholders.
- Experience designing or running technical incident simulations and turning findings into validated improvements across teams.
Nice to have
- Experience directly leading responders and mentoring responders, engineers, and architects.
- Experience in distributed cloud-scale environments; broad security-domain knowledge; or scripting/coding in Python, Go, or similar.
Pay
USD $211,000 per year - USD $234,000 per year (base salary; San Francisco, CA-based roles)
Tools
Python, Go
AI focus
Build or use AI-driven tooling and AI-assisted investigative workflows for incident-response triage, investigation, correlation, or decision support, with source validation, data protection, and human decision gates.
Model-written summary · the original posting is authoritative