Senior Security Incident Commander

Senior Security Incident Commander Department: Engineering Team: Security Engineer Location: San Francisco, United States Type: Full-Time **About the Role** As a Senior Security Technologist, Incident Command, you are accountable for leading Uber’s most critical, complex, and high-impact security incidents end-to-end - from escalation to containment, recovery, and systemic remediation. You operate at the intersection of Fire Captain, NTSB Investigator, and hands-on technical practitioner. In the moment, you take command - setting strategy, assigning resources, and making high-consequence decisions under pressure. After the smoke clears, you drive deep technical investigation and post-incident analysis to ensure we understand not just what happened, but why it happened, and that meaningful, durable fixes are made. This is not a passive coordination role. You are expected to be technically credible, decisive in ambiguity, and comfortable owning outcomes when there is no playbook. You will shape how Uber responds to security incidents at scale - raising the technical bar, building and modernizing tooling and workflows, and influencing teams beyond Engineering Security. **What the Candidate Will Need / Bonus Points** \-\-\-\- What the Candidate Will Do ---- 01. Command the highest severity and most complex security incidents across Uber and its subsidiaries, serving as the single accountable leader during active response. 02. Participate in an on-call rotation where you are expected to make real-time decisions with incomplete information, balancing speed, risk, and impact. 03. Act as the incident authority, not just a facilitator - forming hypotheses, setting strategy, and directing investigative focus. 04. Transition seamlessly between executive-level incident leadership and hands-on technical investigation, including log analysis, system interrogation, and root cause validation. 05. Serve as the primary interface to senior leadership during critical incidents, translating evolving technical realities into clear risk, impact, and decision frameworks. 06. Build and maintain strong working relationsh