> Markdown version of [/jobs/ext/4196352-security-technologist-ii-incident-command](https://www.wearedevelopers.com/jobs/ext/4196352-security-technologist-ii-incident-command). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Technologist II - Incident Command

- **Company:** Uber
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $153,000
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Bash Shell, Cloud Computing Security, Cyber Security, Computer Networks, Digital Forensics, Python (Programming Language), Network Monitoring, Network Protocols, Security Information and Event Management, TCP/IP, Scripting, Firewalls (Computer Science), Information Technology, Cybercrime
- **Published:** October 26, 2026
- **Apply:** https://www.sanfranciscogigs.com/job.asp?id=3467526126&tx=YT1313TTI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in Computer Science, Information Security, or a related field..
 * 3+ years of professional experience in a security-focused role, such as Incident Response, Security Operations, or Digital Forensics.
 * Proven experience with incident response and handling in a professional environment.
 * Familiarity with common security tools and technologies (e.g., SIEM, EDR, network monitoring).
 * Experience in a scripting language (e.g., Python, Bash) for task automation and data analysis.
 * Strong problem-solving skills and the ability to work effectively under pressure.
 * Excellent written and verbal communication skills.
 * Preferred Qualifications ----
 * Experience in a large-scale, enterprise environment, particularly within the technology sectors.
 * Hands-on experience across multiple domains such as network, hosts, applications, data, cloud security etc.
 * Strong understanding of network protocols, TCP/IP, and firewall concepts.
 * Knowledge of scripting and development in languages like Python or Go .
 * Experience with ML and GenAI security concepts is a plus.

## Description

The CyberSecurity Incident Response team (CIRT) is at the forefront of protecting Uber, our customers, and our partners from evolving security threats. We are a hands-on, fast-paced team that responds to security incidents, conducts forensic investigations, and builds automated solutions to scale our defence.

As a Security Analyst on the CIRT team, you will be a key player in our incident response efforts. This is a technical and investigative role where you'll be responsible for:

 1. Responding to security incidents and mitigating threats across the company.
 2. Conducting in-depth investigations and digital forensics to uncover the root cause of attacks.
 3. Developing and implementing automation solutions using tools like SIEM and SOAR to improve our response capabilities.
 4. Collaborating with other security and engineering teams to address vulnerabilities and strengthen our security posture.
 5. Communicating your findings clearly and concisely to help shape our long-term security strategy.

We are looking for someone who is passionate about solving complex security puzzles and is eager to build innovative solutions to protect a global platform.

What the Candidate Will Need / Bonus Points

 * What the Candidate Will Do ----
 * Incident Response : Act as a first responder to security alerts, triaging and containing threats across the Uber platform.
 * Forensic Analysis : Investigate security incidents by analyzing logs, network traffic, and host data to determine the root cause, scope, and impact.
 * Automation : Develop and deploy scripts and playbooks to automate incident response workflows and improve team efficiency.
 * Threat Hunting : Proactively search for emerging threats and vulnerabilities using threat intelligence to mitigate risks before they can be exploited.
 * Collaboration : Partner with other teams to share threat intelligence, recommend security improvements, and communicate incident findings.