Uber Freight is looking for an Enterprise Security Engineer to join our Security team to help us deliver on several key initiatives for the company in the software and security engineering spaces. Through your work, you will dramatically improve our security posture through efforts in the following areas:
Design, build and deploy automation to scale vulnerability discovery efforts
Drive vulnerability remediation across prod, CORP, cloud, endpoint and mobile assets.
Provide actionable security guidance to asset owners in an effort to speed up vulnerability remediation
Endpoint hardening of Macs, PCs, Linux servers, Windows servers, network equipment, SaaS, etc.
Compliance monitoring
Device Attestation
Email Security
Data Loss Prevention
Shadow IT identification and remediation
Malware scanning and threat hunting
This is a unique opportunity for a hands-on security specialist to protect the vast footprint of Uber Freight endpoints and implement automation to improve response levels
What The Candidate Will Do
Fine tuning and maintaining of all security tools
Evaluating new security solutions to identify Security Gaps and assist in remediation efforts to increase Uber Freights security posture
Develop and implement Security Orchestration Automation and Response (SOAR)
Timely respond to security events, 0-day and outages
Monitor adherence to standards and recommend improvements as needed
Basic Qualifications
5+ years of relevant security engineering experience
Up to date with recent security attack vectors and latest security research
Knowledge of EDR, Web application firewalls, and Email security including DMARC/DKIM/SPF
Preferred Qualifications
B.S. or above in Computer Science, Electrical, or Computer Engineering, or equivalent work experience as a security practitioner or a cloud architect
Familiar with security standards such as NIST, CIS Benchmarks
Industry recognized security certification (CISSP, CISA, CEH, etc.)
Experience with Threat Based Defense
Experience building countermeasures based on the kill chain or ATT&CK Framework
Familiarity with operating system internals and hardening
Experience developing, deploying, and configuring security services and tools
Understanding of authentication, authorization, and directory services
Ability to operate independently, to learn new concepts and adapt to shifting priorities
Excellent communication skills and ability to communicate with multiple teams at the same time, across different time zones
Benefits & Compensation for U.S. Employees
Employees working more than 30 hours in the US at Uber Freight are eligible for benefits like a company sponsored health plan, dental and vision benefits, 401k match, financial and mental wellness benefits, parental leave, short- and long-term disability coverage, life insurance and more. US based employees may also be eligible for a performance or sales incentive bonus program, participation in Uber Freight equity awards, and other types of compensation depending upon the role.
About Uber Freight
Uber Freight is a market-leading enterprise technology company powering intelligent logistics. With a suite of end-to-end logistics applications, managed services and an expansive carrier network, Uber Freight advances supply chains and moves the world's goods. Today, the company manages nearly $20B of freight and one of the largest networks of carriers. It is backed by best-in-class investors and provides services for 1 in 3 Fortune 500 companies, including Del Monte Foods, Nestle, Anheuser-Busch InBev, and more. For more, visit www.uberfreight.com.
Candidate Privacy Notice
Uber Freight is committed to protecting the privacy of our candidates. We collect and process personal data in accordance with applicable data protection laws. For detailed information on how we handle candidate data, please review our Candidate Privacy Notice.
EEOC
Uber Freight is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regards to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.