{"id":3953129,"url":"https://alion.io/job/uber-manager-ii-security-engineering-engineer","title":"Manager II, Security Engineering - Engineer","company":{"id":230,"name":"Uber","domain":"uber.com","url":"https://alion.io/company/uber","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":88,"open_postings":139,"ghost_share":0.029,"stale_share":0.554,"repost_share":0.072,"time_to_fill_p50_days":12,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":232000,"max":258000,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-11-05T23:37:38Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-09T05:43:09Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About the Role\nUber’s Incident Command and Cyber Resilience team, part of the Threat Defense and Response (TDR) organization, leads the response to our highest-severity cybersecurity incidents and continuously tests our ability to detect, respond to, and recover from threats. We protect Uber’s people, products, infrastructure, and data across the intersection of the digital and physical world.\nWe are looking for an experienced engineering manager to lead a global team and own the strategy, roadmap, and execution across Incident Command, Purple Team, the Insider Threat Program, and Cyber Resilience. You will establish clear command during critical incidents, bring the right teams together, and drive decisions that reduce harm and restore secure operations.\nYour responsibility extends beyond the incident itself. You will turn lessons from real events, adversary emulation, and continuous testing into stronger detections, more effective response, and demonstrated readiness. You will also guide engineering investments in automation and AI that improve response speed and quality while preserving human judgment and accountability.\nThis role requires a leader who can make sound decisions with incomplete information, communicate clearly under pressure, and develop people who do the same.\nWhat the Candidate Will Do\nLead Incident Command. Manage and develop a global team of incident commanders responsible for Uber’s highest-severity cybersecurity incidents, including active threats, critical vulnerabilities, insider risks, and security incidents involving large-scale fraud. Serve as a senior escalation point and assume command when needed.\n\nDrive decisions and coordinated execution. Establish incident objectives, roles, priorities, escalation paths, and operating cadence. Coordinate investigation, containment, remediation, and recovery across Security, Infrastructure, Product, and Business teams, resolving dependencies and driving actions to completion.\n\nLead sensitive incident coordination and communication. Partner with Legal, Privacy, People, Communications, and other stakeholders to navigate complex incidents. Give executives clear assessments of impact, uncertainty, response options, and decisions required.\n\nOwn the Cyber Resilience program. Establish continuous testing and validation of detection and response capabilities across people, processes, and technology. Test the full path from adversary activity through telemetry, detection, triage, escalation, containment, and recovery.\n\nLead Purple Team. Set priorities for collaborative adversary emulation and testing with offensive security, threat intelligence, detection engineering, and response teams. Use realistic attack scenarios to expose gaps, drive improvements, and retest to verify that fixes work.\n\nOwn the Insider Threat Program. Define the program’s strategy, operating model, and roadmap with Security, Legal, Privacy, and People partners. Strengthen prevention, detection, investigation, and response to insider risks, with disciplined handling of sensitive information and respect for employee privacy.\n\nBuild organizational readiness. Own tabletop exercises, incident simulations, premortems, and post-incident reviews. Translate internal lessons, external incidents, and emerging threats into prioritized improvements with clear owners and verified outcomes.\n\nGuide engineering, automation, and AI investments. Lead the development and integration of tools that improve incident coordination, evidence synthesis, decision support, and readiness testing. Define clear approval boundaries, auditability, and human oversight for consequential actions.\n\nSet direction and measure results. Own the team’s roadmap, staffing, and delivery commitments. Establish measures for command readiness, detection and response effectiveness, validated threat coverage, and closure of recurring gaps. Integrate security response and production incident management practices to improve execution across Uber.\n\nBuild and grow the team. Hire, coach, and develop incident commanders and engineers. Set clear expectations for performance and technical quality, support career growth, and build an inclusive culture grounded in accountability, sound judgment, and continuous learning.\n\nBasic Qualifications\n8+ years of experience in security incident response, security engineering, production incident management, or security and infrastructure operations.\n\nExperience directly managing technical teams, including hiring, performance management, career development, and delivery accountability.\n\nExperience serving as incident commander or incident lead for high-severity cybersecurity or production incidents in complex, distributed environments.\n\nDemonstrated ability to establish command, prioritize actions, and drive decisions across teams with competing demands and incomplete information.\n\nWorking knowledge of cybersecurity investigation, containment, and recovery across infrastructure, applications, identity, and cloud services.\n\nExperience owning a technical program or operational capability, including setting priorities, delivering improvements, and measuring effectiveness.\n\nStrong written and verbal communication skills, including communicating technical risk, business impact, and response decisions to senior leaders.\n\nPreferred Qualifications\nExperience managing a cybersecurity incident command or response team operating globally with on-call and follow-the-sun coverage.\n\nExperience building or leading Purple Team, adversary emulation, or continuous security validation programs, using frameworks such as MITRE ATT&CK to prioritize and assess coverage.\n\nExperience leading an Insider Threat Program or coordinating sensitive insider investigations with Legal, Privacy, and People teams.\n\nExperience designing exercises that test detection, escalation, containment, and recovery, and translating findings into verified improvements.\n\nExperience leading engineering teams that build incident management platforms, response automation, or AI-assisted operational workflows.\n\nExperience integrating cybersecurity response with SRE or production incident management practices.\n\nA track record of improving response effectiveness through post-incident learning, measurable readiness standards, and sustained remediation of systemic gaps.\n\n For Seattle, WA-based roles: The base salary range for this role is USD $232,000 per year - USD $258,000 per year.\nYou will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.","description_format":"text","description_chars":6695,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Delivery","Freight Forwarding","Information Security","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-11-09T05:43:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 837 · green card filings: 258","filings_12m":837,"filings_prev_12m":952,"green_card_filings_12m":258,"median_offered_wage_usd":186897,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":49}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":3,"expected_fill_days":12,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/uber-manager-ii-security-engineering-engineer","json_url":"https://alion.io/job/uber-manager-ii-security-engineering-engineer.json","meta":{"generated_at":"2026-11-09T06:22:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2405,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":230},"rest":"https://alion.io/mcp/rest/get_company?id=230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fuber-manager-ii-security-engineering-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fuber-manager-ii-security-engineering-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fuber-manager-ii-security-engineering-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/uber-manager-ii-security-engineering-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fuber-manager-ii-security-engineering-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3953129}},{"tool":"search_jobs","arguments":{"company":"uber.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3953129},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}