Sr. Security Incident Commander jobs in United States
cer-icon
Apply on Employer Site
company-logo

Uber · 5 hours ago

Sr. Security Incident Commander

Uber is seeking a Senior Security Technologist to lead critical and complex security incidents from escalation to resolution. The role involves high-level decision-making, technical investigation, and post-incident analysis to enhance Uber’s incident response capabilities.

TransportationSoftwareAppsLogisticsMobile AppsRide Sharing
check
H1B Sponsor Likelynote
Hiring Manager
Jonte Giacomino
linkedin

Responsibilities

Command the highest severity and most complex security incidents across Uber and its subsidiaries, serving as the single accountable leader during active response
Participate in an on-call rotation where you are expected to make real-time decisions with incomplete information, balancing speed, risk, and impact
Act as the incident authority, not just a facilitator - forming hypotheses, setting strategy, and directing investigative focus
Transition seamlessly between executive-level incident leadership and hands-on technical investigation, including log analysis, system interrogation, and root cause validation
Serve as the primary interface to senior leadership during critical incidents, translating evolving technical realities into clear risk, impact, and decision frameworks
Build and maintain strong working relationships with global engineering, infrastructure, legal, privacy, and operations teams to enable fast, coordinated response
Conduct rigorous post-incident analysis in the spirit of an NTSB investigation - focused on systemic causes, contributing factors, and concrete prevention
Mentor and develop other responders and incident leaders, raising the organization’s ability to handle complex, time-critical security events
Lead and materially contribute to initiatives that mature Uber’s incident response program, including: High-fidelity incident simulations and technical tabletop exercises, Threat-informed response planning and scenario development, ‘Left of boom’ threat modeling to prevent incidents before they occur, Improvements to detection, containment, and response automation, Adoption of new investigative techniques and tooling, including AI-assisted workflows

Qualification

Security operations experienceTechnical investigation skillsIncident response leadershipAI-driven tooling experienceIncident simulations designUnderstanding attacker TTPsBias for actionScriptingCodingBroad security domain knowledgeMentorship skills

Required

5+ years in security operations, detection, or incident response roles at scale, with demonstrated ownership of ambiguous, large, complex, high-impact incidents
Deep familiarity with modern attacker TTPs and how they manifest across logs, systems, networks, endpoints, and applications
Strong technical investigation skills - comfortable working directly with logs, telemetry, and raw system data to validate hypotheses and determine root cause
Experience briefing executives during active incidents, with the ability to clearly explain tradeoffs, risks, and recommended actions
Experience designing or running technical incident simulations (tabletops, purple team exercises, or similar) that stress real-world response capabilities
Experience building or leveraging AI-driven tooling to improve incident response posture, applying frontier technology to workflows such as triage, investigation, correlation, or decision support

Preferred

Demonstrated experience leading other responders through direct command during incidents and longer-term technical mentorship
Strong bias for action and continuous improvement - uncomfortable with leaving with a shrug if things aren't right
Experience responding to incidents in highly distributed, cloud-scale environments where blast radius and coordination complexity are significant
Broad security domain knowledge (infrastructure, endpoint, product, identity, data) and the ability to reason across them during incidents
Ability to script or code (Python, Go, or similar) to automate response tasks, prototype tooling, or close operational gaps

Company

Uber develops, markets, and operates a ride-sharing mobile application that allows consumers to submit a trip request.

H1B Sponsorship

Uber has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (830)
2024 (796)
2023 (684)
2022 (954)
2021 (750)
2020 (638)

Funding

Current Stage
Public Company
Total Funding
$35.56B
Key Investors
William AckmanPayPalToyota Motor
2025-09-08Post Ipo Debt· $2.25B
2025-05-13Post Ipo Debt· $1B
2025-01-01Post Ipo Equity· $2.3B

Leadership Team

leader-logo
Dara Khosrowshahi
CEO
linkedin
leader-logo
Prashanth Mahendra -Rajah
Chief Financial Officer
linkedin
Company data provided by crunchbase