Security Analyst

Role & responsibilities

• About the Role: Uber's Security Response and Investigations (SRI) team is the cybersecurity incident response body at Uber. SRI responds to security incidents and mitigates security threats across the company. The SRI team is made of three teams: vSOC (virtual Security Operations Center), Investigations and Automation, and Incident Command. You will be joining the vSOC team. As a Security Analyst on the vSOC team,
• You will be on the front-line of defense for the Uber Security Incident Response program.
• You will be handling triage for all security alerts for Uber globally across all environments (cloud, prod, corp).
• You will build Standard Operating Procedures (SOP) and help improve the incident response program.
• You will serve as an incident coordinator during high and critical severity incidents.
• Expect to work weekend shift (Saturday / Sunday)

Basic Qualifications:

• Good understanding of cybersecurity fundamentals. This includes but is not limited to network protocols (e.g. TCP/IP stack) and security, system security, email security, etc.
• 2+ years of hands-on experience in a cybersecurity role.
• 1+ year of hands-on experience with security monitoring and response in a SOC environment.
• Strong problem-solving skills.
• Good communication skills.

Preferred Qualifications:

• Experience with cybersecurity forensic methodologies and software.
• Experience driving complex incidents or leading investigations end-to-end.
• Threat hunting and Automation experience(SOAR/Python).
• Applied knowledge of cyber intel frameworks such as ATT&CK framework and kill-chain model. Experience working crisis events for a global company. Ability to work across geographically distributed teams.