Sr Security Technologist - Risk & Compliance

Uber; Sunnyvale (CA); Hybrid; USD 180,000 - 200,000; Full time

Job summary

Uber is seeking a Senior Security Technologist to lead diligence, integration, and operational security for acquisitions and subsidiary environments. You will uplift security operations to Uber minimum standards post-acquisition and collaborate across teams to deploy scalable security tooling and automation.

You will design security integrations, build automation, and write code to streamline onboarding, telemetry, and incident response.

Qualifications

• 5+ years of experience in security engineering, cloud security, infrastructure security, detection and response, or related technical security roles.
• Bachelor's degree in CS, InfoSec, Engineering, or equivalent practical experience.
• Hands-on engineering and troubleshooting in modern enterprise environments.
• Experience applying risk management in complex cybersecurity environments (cloud and on‑prem).
• Experience writing code or automation in Python, Go, Bash, or similar.
• Experience integrating or deploying security technologies in cloud/enterprise environments.
• Experience with modern cloud infrastructure and SaaS ecosystems.
• Familiarity with AI-assisted development workflows and automation techniques.
• Experience supporting or responding to security incidents.
• Understanding of cloud infrastructure, IAM, endpoint security, vulnerability management, logging/telemetry, SaaS platforms, and networking fundamentals.
• Ability to communicate complex technical concepts to technical and non-technical audiences.
• Comfort collaborating across teams in fast-moving environments.

Responsibilities

• Assess the cyber security maturity of acquisition targets across infrastructure, on-prem, cloud, identity, endpoint, SaaS, and engineering environments.
• Identify key technical and operational risks, domain security gaps, and integration challenges for acquired entities.
• Design and implement scalable security integrations for newly acquired companies and subsidiaries.
• Build automation, tooling, and workflows to accelerate security onboarding and operational visibility.
• Write code and scripts to integrate systems, normalize telemetry, automate remediation, and improve efficiency.
• Use AI-assisted engineering and automation techniques to enhance analysis, integration, and security operations workflows.
• Deploy and operationalize security services such as: EDR, vulnerability management, logging/telemetry collection, IR monitoring, IAM, device management, cloud security monitoring, asset inventory.
• Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response, IT Privacy, Legal, Corporate Development, and stakeholders during acquisitions.
• Respond to and coordinate security incidents involving subsidiaries and acquired entities.
• Support containment, remediation, recovery, and long-term hardening during incident response scenarios.

Skills

Security engineering

Cloud security

Infrastructure security

Detection & response

Python

Go

Automation scripting

Risk management

AI-assisted workflows

Incident response

Identity access mgmt

IAM

Networking basics

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field

Tools

Terraform

CloudFormation

Job description

About The Role

As a Senior Security Technologist on the team, you will help lead security diligence, integration, and operational security efforts for acquisitions, strategic investments, and subsidiary environments. You will collaborate with subsidiary security personnel to uplift their security operations to Uber minimum standards post-acquisition.

As a Senior Security Technologist on the team, you will help lead security diligence, integration, and operational security efforts for acquisitions, strategic investments, and subsidiary environments. You will collaborate with subsidiary security personnel to uplift their security operations to Uber minimum standards post-acquisition.

The Ideal Candidate Is Comfortable

• building automation and integrations,
• investigating security incidents,
• deploying security tooling,
• leveraging AI-assisted engineering workflows,
• and communicating technical risk to leadership.

You’ll be successful in this role if you enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments.

Travel may occasionally be required to support acquisition diligence or integration efforts, but is generally infrequent and based on business needs.

What You'll Do

Assess the cyber security maturity of acquisition targets across infrastructure, on-prem, cloud, identity, endpoint, SaaS, and engineering environments

• Identify key technical and operational risks, domain specific security gaps, and integration challenges associated with acquired organizations
• Design and implement scalable security integrations for newly acquired companies and subsidiaries
• Build automation, tooling, and workflows to accelerate security onboarding and operational visibility
• Write code and scripts to integrate systems, normalize telemetry, automate remediation activities, and improve operational efficiency
• Use AI-assisted engineering and automation techniques to improve analysis, integration, and security operations workflows
• Deploy and operationalize security services such as:
• endpoint detection and response (EDR)
• vulnerability management
• logging and telemetry collection
• Incident Response Monitoring for Subsidiaries
• identity and access management
• device management
• cloud security monitoring
• asset inventory and visibility tooling
• Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response and Investigations, Information Technology (IT) Privacy, Legal, Corporate Development, and business stakeholders during acquisition and integration activities
• Respond to and help coordinate security incidents involving subsidiaries and acquired entities
• Support containment, remediation, recovery, and long‑term hardening efforts during incident response scenarios

Basic Qualifications

• 5+ years of experience in security engineering, cloud security, infrastructure security, detection and response, or related technical security roles
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience
• Hands‑on engineering and troubleshooting experience in modern enterprise environments
• Experience applying risk management principles in complex cybersecurity environments, including both cloud and on‑premises infrastructure.
• Experience writing code or automation using languages such as Python, Go, Bash, or similar
• Experience integrating or deploying security technologies in cloud or enterprise environments
• Experience working with modern cloud infrastructure and SaaS ecosystems
• Familiarity with AI‑assisted development workflows and modern automation techniques
• Experience supporting or responding to security incidents
• Understanding of:
• cloud infrastructure and security
• identity and access management
• endpoint security
• vulnerability management
• logging and telemetry systems
• enterprise SaaS platforms
• networking fundamentals
• Ability to communicate complex technical concepts clearly to both technical and non‑technical audiences
• Comfort navigating evolving priorities and collaborating across teams in fast‑moving environments

Preferred Qualifications

• Strong information assurance management principles and practices
• Assess security risk across interconnected cloud and on‑premises environments.
• Understand how security controls interact, overlap, and compensate for one another.
• Apply risk‑based decision‑making to evaluate control effectiveness and overall security posture.
• Partner with technical and business teams to align security requirements with operational needs
• Experience building internal security tooling or operational automation platforms
• Experience integrating acquired environments into centralized security operations
• Familiarity with detection engineering, SIEM platforms, or telemetry pipelines
• Experience assessing engineering and software development security practices
• Experience with infrastructure‑as‑code or cloud automation frameworks
• Experience using LLMs or AI tooling to improve engineering or security workflows
• Incident response, investigative, and problem‑solving experience
• Written communication and program management experience
• Ability to balance pragmatic execution with long‑term security strategy

For San Francisco, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full‑time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

Ready to Ride?

This isn't the kind of place where you follow a playbook - it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves - we'd love to hear from you.

You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits.

Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in‑office. Some roles, like those at greenlight hubs, require full‑time in‑office presence.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.