Job DescriptionAbout the RoleUber's Human Risk Management (HRM) team helps people recognize and reduce security risk through training, communications, and behavior change.
As a Senior Security Technologist within Engineering Security, you will build and run Uber's security learning and awareness program. Using an established annual communications calendar and prioritized threat themes, you will develop a risk-based curriculum, prepare campaigns ahead of schedule, and tailor content to the audiences who need it.
This role combines security expertise with hands-on instructional design and adult learning experience. You will define measurable learning objectives, create effective training, and use data to assess whether it changes behavior. You will also identify when a control, process, or tooling change would address risk more effectively than awareness.
What You'll Do- Own the security awareness curriculum, mapping risk topics to audiences, delivery formats, schedules, and module dependencies.
- Develop complete training modules, including scripts, storyboards, interactive content, and assessments tied to measurable learning objectives. Maintain an assessment bank with documented answers and rationale.
- Create targeted content for elevated-risk audiences, including engineering, finance, executive support, and new joiners.
- Produce accessible, localization-ready content that meets Uber's standards. Package modules for Uber's learning platform, using formats such as SCORM or xAPI, and validate completion and score reporting.
- Deliver campaigns ahead of the annual communications calendar, adapting content for email, Slack, intranet, digital signage, manager talking points, and short-form video.
- Tailor messaging for technical and non-technical audiences while maintaining a consistent narrative. Own reusable message libraries, style and tone guides, and campaign templates.
- Conduct structured stakeholder interviews to understand role-based risks, control friction, misconceptions, and effective communication channels. Maintain audience and threat-to-message maps to connect content to risks and identify coverage gaps.
- Identify risks that require changes to controls, processes, or tooling, and route findings to the responsible teams.
- Measure engagement, completion, assessment performance, and behavioral outcomes. Connect results to signals from phishing simulations, identity, endpoint, and security reporting systems to improve the program and inform executive reporting.
- Partner with Security, Communications, Learning and Development, People, and business teams to reflect policies, incidents, and emerging threats in program content.
- Evaluate and adapt licensed third-party content for Uber where rights permit.
- Use approved AI tools to accelerate content development, assessments, audience variants, localization preparation, and analysis.
Basic Qualifications- Bachelor's degree in Instructional Design, Education, Communications, Information Security, or a related field, or equivalent practical experience.
- Experience in security awareness, human risk management, instructional design, or learning and development, with ownership of an enterprise-scale training or awareness program.
- Hands-on instructional design and adult learning experience, including measurable learning objectives, aligned assessments, and finished content such as scripts, storyboards, and e-learning interactions.
- Internal communications experience, with the ability to write clearly for technical and non-technical audiences and communicate results to security leadership.
- Working knowledge of security awareness and human risk management, including phishing, social engineering, credential handling, data handling, and insider risk.
- Experience with learning management systems and content packaging standards such as SCORM or xAPI.
- Experience conducting structured stakeholder interviews and translating findings into documented audience needs and content requirements.
- Experience using engagement, completion, or assessment data to improve content.
- Familiarity with AI-assisted content development and analysis.
- Ability to work independently, manage a production calendar, and adapt to changing priorities.
Preferred Qualifications- Experience running a security awareness or human risk program in a large, decentralized engineering or technology organization.
- Experience with phishing simulation platforms, human risk scoring, or behavioral security analytics.
- Experience with accessibility standards such as WCAG 2.1 AA and preparing content for localization.
- Experience authoring or maintaining security policies, standards, and procedures aligned with recognized control frameworks.
- Experience managing editorial operations, including style guides and message libraries, or producing video, short-form content, and digital signage.
- Scripting or automation experience, such as Python, to process learning data, generate content variants, or integrate systems.
- Security certifications such as SSAP or Security+, or learning credentials such as CPTD or certifications from ATD.
- Ability to balance program delivery with long-term strategy.
ResponsibilitiesFor San Francisco, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.
For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.
For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.
