About the Role
Uber's Security Response and Investigations (SRI) team is the cybersecurity incident response body at Uber. SRI responds to security incidents and mitigates security threats across the company. The SRI team is made of three teams: vSOC (virtual Security Operations Center), Investigations and Automation, and Incident Command. You will be leading the Investigations and Automation team.
What the Candidate Will Do

• Lead a team of security investigators and automation engineers who conduct deep cybersecurity incident investigations and build IR solutions.
• Lead the team to develop automation to improve the consistency and efficiency of incident response.
• Mentor and grow the team.
• Build a strong culture of diversity and inclusion.
• Work with partners across the organization to deliver results.

Basic Qualifications

• Must be highly experienced in cybersecurity incident response.
• 10+ years of experience on a security engineering or operations team responding to cyber security incidents.
• 1+ year being a team lead or tech lead on an incident response team.
• Strong foundation in security principles.
• Cybersecurity knowledge across multiple domains such as network, hosts, applications, data, cloud etc.
• Strong communication, leadership, and problem-solving skills.
• Experience mentoring people's career development.

Preferred Qualifications

• Experience leading and driving complex incidents and / or crisis events.
• Experience in building automation/engineering solutions for incident response problems.
• Proficient in Agile framework and DevOps.
• A proven track record working across a larger organization.
• Threat hunting experience.
• Applied knowledge of cyber intel frameworks such as ATT&CK framework and kill-chain model.
• Ability to work across geographically distributed teams.