Uber
Staff Security Technologist - Incident Commander
San Francisco, CA · Staff+ · Full-time
Sponsorship not specifiedDetected 5 days ago
PythonGoCybersecuritySOC OperationsIncident ResponseLeadershipCommunicationCollaborationMentoring
Stay score
odds of building a lasting career here
42Risky
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card follow-through: 100%
Of 164 labor certifications old enough to have been used, 0 expired without the employer filing the next step. Median time from filing to decision: 500 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.
Files H-1B transfers
219 transfer filings in the last year, covering 219 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This role will sit in either our Seattle, San Francisco, or Sunnyvale office.
- You operate at the intersection of Fire Captain, NTSB Investigator, and hands-on technical practitioner.
- In the moment, you take command - setting strategy, assigning resources, and making high-consequence decisions under pressure.
Responsibilities
- After the smoke clears, you drive deep technical investigation and post-incident analysis to ensure we understand not just what happened, but why it happened, and that meaningful, durable fixes are made.
- As a technical domain and cultural leader, you drive the priorities, goals, and delivery of a significant incident response program spanning multiple high-complexity projects.
- Drive cross-team remediation with accountable owners, timelines, and validation of durable risk reduction.
- Own the priorities, goals, and delivery of a significant incident response program with multiple high-complexity projects, in partnership with Senior Manager and Director+ stakeholders.
- High-fidelity incident simulations and technical tabletop exercises that develop responders, expose readiness gaps, and turn incident learnings into validated improvements
Requirements
- 8+ years in security operations, detection, or incident response roles at scale, with demonstrated ownership of ambiguous, large, complex, high-impact incidents and significant, high-complexity, multi-team programs.
- Recognized technical domain expertise in incident response, with deep familiarity with modern attacker TTPs and how they manifest across logs, systems, networks, endpoints, and applications.
- Ability to translate business problems, risk, and threats into security requirements and effective response solutions.
Nice to have
- Experience responding to incidents in highly distributed, cloud-scale environments where blast radius and coordination complexity are significant, and driving improvements across multiple teams and adjacent functions.
- Ability to script or code (Python, Go, or similar) to automate response tasks, prototype broadly reusable tooling, or close investigation and operational gaps.
- All full-time employees are eligible to participate in a 401(k) plan.
- This isn't the kind of place where you follow a playbook - it's where you help write one.
- If you're driven by impact, energized by challenge, and ready to shape how the world moves - we'd love to hear from you.
- Offices remain key to collaboration and Uber's culture.
- Some roles, like those at greenlight hubs, require full-time in-office presence.
- Ask your Recruiter for details about this role's requirements.
This listing is sourced directly from Uber's careers page and normalized into a canonical job model.