Uber Looking For Sr Security Engineer – Investigations (India Remote Available) at Karnataka , Mysore Full Time

At uber, we reimagine the way the world moves for the betterThe idea was born on a snowy night in paris in 2008, and ever since then, our dna of reimagination and reinvention carries onWe’ve grown into a global platform moving people and things in ever-expanding ways, taking on big problems to help drivers, riders, delivery partners, and eaters make movement happen at the push of a button for everyone, everywhere.
We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independentlyIf you have the curiosity, passion, and collaborative spirit, work with us, and let’s move the world forward, together.
About the role
Uber`s security response and investigations (sri) team is the cybersecurity incident response body at uberSri responds to security incidents and mitigates security threats across the companyThe sri team is made of three teams: vsoc (virtual security operations center), investigations and automation, and incident commandYou will be joining the investigations and automation teamAs a security engineer on the investigations and automation team, you will be on the ground floor, responding to security incidents, providing hands-on investigations, forensics, and response expertise, developing automation solutions, and helping to shape security responses at uberYou will also partner closely with the security operations center analysts and incident commanders, leading incident investigations and providing mentorship to analysts.
This is an opportunity to be on the ground floor, helping to build out tools, processes and procedures, with your work affecting the company at largeThis is a hands-on technical position tasked with investigating cybersecurity incidents on the uber platform as well as against the businessYou should enjoy getting your hands dirty doing complex analysis and investigations – you are comfortable being the technical expertYou will solve complex puzzles, piecing together the most obscure clues, while building and communicating solid work resultsCandidates must have a driving passion for hunting down the bad guys, as well as the intuition and judgement required to efficiently prioritize their workCandidates must have excellent communication and problem solving skills, along with experience dealing with sensitive matters effectively and respectfully.
What the candidate will need / bonus points
– what the candidate will do –

Conduct rapid response, mitigation, and investigations on highest priority cases impacting uber and user data.
Conduct forensics investigations and present findings.
Develop automation to improve the consistency and efficiency of incident response.
Conduct threat hunting.
Partner with global team members to drive response and investigations globally.
Support and mentor analysts conducting investigations and triage.
Manage multiple cases and projects at once while effectively prioritizing time.
Produce concise yet thorough case reports for internal and external stakeholders.

– basic qualifications –

Must be highly experienced in the incident response lifecycle.
10+ years of hands-on experience on a security engineering or operations team responding to cyber security incidents.
Strong foundation in security principles.
Cybersecurity knowledge across multiple domains such as network, hosts, applications, data, cloud and etc.
Strong problem-solving skills.

– what the candidate will do –

Experience with cybersecurity forensic methodologies and software.
Experience driving complex incidents or leading large investigations end-to-end.
Technical experience with devops and scripting languages for automating data gathering and investigation workflowsExperience with building automations for incident response is a plus.
Threat hunting experience.
Applied knowledge of cyber intel frameworks such as att&ck framework and kill-chain model.
Experience working crisis events for a global companyAbility to work across geographically distributed teams.
Certifications in security is a plus.

Hiring insights

Job activity

Posted 4 days ago