About the Role
- - - - What the Candidate Will Do ----
- Developing, deploying and managing tools to secure and monitor our corporate and production customer facing systems, services and 3rd party SaaS applications, including ownership of our Endpoint/Extended Detection and Response (E/XDR) tooling and capabilities.
- Evaluating new Enterprise Security solutions designed to increase Uber's security posture.
- Developing and driving the roadmap for features and systems for assessing the security posture of our endpoints and enterprise applications
- Collaborating and consulting with multiple engineering teams and other functional stakeholders from Privacy, Security, Compliance, Infrastructure, and Product for integration into our platform
- Designing and developing new systems that onboard and assess infrastructure
- Evaluate new security solutions designed to increase Uber's security posture
- Develop and deploy solutions to provide Uber with the ability to monitor our systems against industry standard benchmarks for hardening and reporting on any exceptions
- Building distributed backend security systems and services that address our team or organizations business needs, at Uber scale
- - - - Basic Qualifications ----
- BS/BE degree in Computer Science or related fields.
- 8+ years of demonstrated experience in security engineering and/or software development/SRE
- Deep understanding of cloud (AWS, GCP, OCI) and on-premise server environments including storage platforms
- Hands-on experience with Go/Java/C/Python (we use Python and Go!)
- Experience developing, deploying, and configuring security services and tools, including but not limited to API development, gRPCs, authentication, authorization and directory services
- Distributed Messaging / Kafka
- Exceptional problem solving, service architecture and communication skills
- Desire to mentor both junior and senior team members
- Passion for knowledge transfers and personal growth
- - - - Preferred Qualifications ----
- Experience with building real time data pipelines
- Experience with Kafka, HDFS, Hive, Redis, MySQL
- Experience building out integrations with open source and vendor products
- Extensive experience (5+ years) designing and implementing large enterprise grade backend systems that scale
- Programmatic experience with modern security tools in: Threat Detection and Response (e.g. Crowdstrike, SentinelOne), Vulnerability Management (e.g. Tenable, Rapid7), Network Security (e.g. Zscaler), or equivalent open source security solutions
- SSO (SAML/OpenIDC)
- Experience building countermeasures based on the kill chain or ATT&CK Framework
- Threat Based Defense experience
- ServiceNow integration experience
* Accommodations may be available based on religious and/or medical conditions, or as required by applicable law. To request an accommodation, please reach out to .