Senior Security Technologist - Human Risk Management

About the Role

Uber’s Human Risk Management (HRM) team helps people recognize and reduce security risk through training, communications, and behavior change.

As a Senior Security Technologist within Engineering Security, you will build and run Uber’s security learning and awareness program. Using an established annual communications calendar and prioritized threat themes, you will develop a risk-based curriculum, prepare campaigns ahead of schedule, and tailor content to the audiences who need it.

This role combines security expertise with hands-on instructional design and adult learning experience. You will define measurable learning objectives, create effective training, and use data to assess whether it changes behavior. You will also identify when a control, process, or tooling change would address risk more effectively than awareness.

What You’ll Do

• Own the security awareness curriculum, mapping risk topics to audiences, delivery formats, schedules, and module dependencies.
• Develop complete training modules, including scripts, storyboards, interactive content, and assessments tied to measurable learning objectives. Maintain an assessment bank with documented answers and rationale.
• Create targeted content for elevated-risk audiences, including engineering, finance, executive support, and new joiners.
• Produce accessible, localization-ready content that meets Uber’s standards. Package modules for Uber’s learning platform, using formats such as SCORM or xAPI, and validate completion and score reporting.
• Deliver campaigns ahead of the annual communications calendar, adapting content for email, Slack, intranet, digital signage, manager talking points, and short-form video.
• Tailor messaging for technical and non-technical audiences while maintaining a consistent narrative. Own reusable message libraries, style and tone guides, and campaign templates.
• Conduct structured stakeholder interviews to understand role-based risks, control friction, misconceptions, and effective communication channels. Maintain audience and threat-to-message maps to connect content to risks and identify coverage gaps.
• Identify risks that require changes to controls, processes, or tooling, and route findings to the responsible teams.
• Measure engagement, completion, assessment performance, and behavioral outcomes. Connect results to signals from phishing simulations, identity, endpoint, and security reporting systems to improve the program and inform executive reporting.
• Partner with Security, Communications, Learning and Development, People, and business teams to reflect policies, incidents, and emerging threats in program content.
• Evaluate and adapt licensed third-party content for Uber where rights permit.
• Use approved AI tools to accelerate content development, assessments, audience variants, localization preparation, and analysis.

Basic Qualifications

• Bachelor’s degree in Instructional Design, Education, Communications, Information Security, or a related field, or equivalent practical experience.
• Experience in security awareness, human risk management, instructional design, or learning and development, with ownership of an enterprise-scale training or awareness program.
• Hands-on instructional design and adult learning experience, including measurable learning objectives, aligned assessments, and finished content such as scripts, storyboards, and e-learning interactions.
• Internal communications experience, with the ability to write clearly for technical and non-technical audiences and communicate results to security leadership.
• Working knowledge of security awareness and human risk management, including phishing, social engineering, credential handling, data handling, and insider risk.
• Experience with learning management systems and content packaging standards such as SCORM or xAPI.
• Experience conducting structured stakeholder interviews and translating findings into documented audience needs and content requirements.
• Experience using engagement, completion, or assessment data to improve content.
• Familiarity with AI-assisted content development and analysis.
• Ability to work independently, manage a production calendar, and adapt to changing priorities.

Preferred Qualifications

• Experience running a security awareness or human risk program in a large, decentralized engineering or technology organization.
• Experience with phishing simulation platforms, human risk scoring, or behavioral security analytics.
• Experience with accessibility standards such as WCAG 2.1 AA and preparing content for localization.
• Experience authoring or maintaining security policies, standards, and procedures aligned with recognized control frameworks.
• Experience managing editorial operations, including style guides and message libraries, or producing video, short-form content, and digital signage.
• Scripting or automation experience, such as Python, to process learning data, generate content variants, or integrate systems.
• Security certifications such as SSAP or Security+, or learning credentials such as CPTD or certifications from ATD.
• Ability to balance program delivery with long-term strategy.

Why Uber?

You will own a program with company-wide reach, helping employees, contractors, and partners make better security decisions. Working across Security, Communications, Learning and Development, Legal, and executive leadership, you will shape how Uber manages human risk at global scale.

We value curiosity, thoughtful problem-solving, collaboration, and continuous learning. We welcome candidates from different backgrounds and industries and encourage you to apply even if you do not meet every qualification.

For San Francisco, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.