Sr Security Technologist - Risk & Compliance

We need to output HTML fragment with sections: About the role, Responsibilities (What You'll Do), Requirements (Basic Qualifications), Preferred Qualifications (maybe as Skills or Qualifications), Benefits, Pay, Schedule (if present). We must not repeat job title. Remove boilerplate like EEO, legal, etc. Also remove "Ready to Ride?" etc. Also remove "Explore our benefits." etc. Also remove "Offices remain key..." etc. Also remove "Uber is proud..." etc. Also remove "If you have a disability..." etc. We need to preserve all substantive information. Let's parse content. First paragraph: "About The Role As a Senior Security Technologist on the team, you will help lead security diligence, integration, and operational security efforts for acquisitions, strategic investments, and subsidiary environments. You will collaborate with subsidiary security personnel to uplift their security operations to Uber minimum standards post-acquisition. This role combines advisory, operational, and hands-on security engineering responsibilities, including automation, incident response, and pragmatic risk management in fast-moving, evolving environments. Successful candidates are excited to build practical solutions, improve security operations, and help teams navigate complex integration challenges. You will write code using approved AI tooling, automate workflows, deploy security tooling to subsidiary environments, integrate systems, improve telemetry visibility, and help operationalize security capabilities across newly acquired target companies and evolving environments. You will also help respond to security incidents involving subsidiaries and acquired companies, partnering closely with internal security teams and business stakeholders to rapidly reduce risk and improve resilience. The Ideal Candidate Is Comfortable building automation and integrations, investigating security incidents, deploying security tooling, leveraging AI-assisted engineering workflows, and communicating technical risk to leadership. You'll be successful in this role if you enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments. Travel may occasionally be required to support acquisition diligence or integration efforts, but is generally infrequent and based on business needs." We can put that under

About the role

with

containing that text (maybe split into paragraphs but okay). Next: "What You'll Do" bullet list. We'll put under

Responsibilities

with

• each bullet. List items: - Assess the cyber security maturity of acquisition targets across infrastructure, on-prem, cloud, identity, endpoint, SaaS, and engineering environments - Identify key technical and operational risks, domain specific security gaps, and integration challenges associated with acquired organizations - Design and implement scalable security integrations for newly acquired companies and subsidiaries - Build automation, tooling, and workflows to accelerate security onboarding and operational visibility - Write code and scripts to integrate systems, normalize telemetry, automate remediation activities, and improve operational efficiency - Use AI-assisted engineering and automation techniques to improve analysis, integration, and security operations workflows - Deploy and operationalize security services such as: endpoint detection and response (EDR) vulnerability management logging and telemetry collection Incident Response Monitoring for Subsidiaries identity and access management device management cloud security monitoring asset inventory and visibility tooling - Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response and Investigations, Information Technology (IT) Privacy, Legal, Corporate Development, and business stakeholders during acquisition and integration activities - Respond to and help coordinate security incidents involving subsidiaries and acquired entities - Support containment, remediation, recovery, and long-term hardening efforts during incident response scenarios Note: The bullet about Deploy and operationalize security services such as: endpoint detection and response (EDR) vulnerability management logging and telemetry collection Incident Response Monitoring for Subsidiaries identity and access management device management cloud security monitoring asset inventory and visibility tooling. It's a long list; we can keep as one bullet. Next: "Basic Qualifications" list. We'll put under

  Requirements

  (or Qualifications). The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can use Requirements for basic qualifications, and Qualifications for preferred? Or Skills for preferred? Let's decide: Use Requirements for basic qualifications, Qualifications for preferred qualifications. Or Skills for preferred? The list includes "Preferred Qualifications:" heading. We'll map to

  Qualifications

  (or Skills). The instruction says we can use Qualifications heading. So we will use Qualifications for preferred. Thus:

  Requirements

  with
  • each bullet. List: - 5+ years of experience in security engineering, cloud security, infrastructure security, detection and response, or related technical security roles - Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience - Hands-on engineering and troubleshooting experience in modern enterprise environments - Experience applying risk management principles in complex cybersecurity environments, including both cloud and on-premises infrastructure. - Experience writing code or automation using languages such as Python, Go, Bash, or similar - Experience integrating or deploying security technologies in cloud or enterprise environments - Experience working with modern cloud infrastructure and SaaS ecosystems - Familiarity with AI-assisted development workflows and modern automation techniques - Experience supporting or responding to security incidents - Understanding of: cloud infrastructure and security identity and access management endpoint security vulnerability management logging and telemetry systems enterprise SaaS platforms networking fundamentals - Ability to communicate complex technical concepts clearly to both technical and non-technical audiences - Comfort navigating evolving priorities and collaborating across teams in fast-moving environments Note: The "Understanding of:" line includes a colon and list; we keep as one bullet. Next: Preferred Qualifications. We'll put under

    Qualifications

    with
    • each bullet. List: - Strong information assurance management principles and practices - Assess security risk across interconnected cloud and on-premises environments. - Understand how security controls interact, overlap, and compensate for one another. - Apply risk-based decision-making to evaluate control effectiveness and overall security posture. - Partner with technical and business teams to align security requirements with operational needs - Experience building internal security tooling or operational automation platforms - Experience integrating acquired environments into centralized security operations - Familiarity with detection engineering, SIEM platforms, or telemetry pipelines - Experience assessing engineering and software development security practices - Experience with infrastructure-as-code or cloud automation frameworks - Experience using LLMs or AI tooling to improve engineering or security workflows - Incident response, investigative, and problem-solving experience - Written communication and program management experience - Ability to balance pragmatic execution with long-term security strategy Next: Pay. The posting includes salary ranges for specific locations: San Francisco, CA; Seattle, WA; Sunnyvale, CA. Also mentions bonus program, equity award, other comp, 401(k) plan, various benefits. So we need a Pay section if posting actually states them. Yes, they state base salary range for those locations. Also mention bonus program, equity award, other types of comp. So we should include Pay section with that info. We should not include schedule unless stated. There's mention: "Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements." That is schedule/location expectation. Could be considered Schedule section. The instruction: include a section ONLY when posting has real, specific content for it — never emit a heading followed by filler/placeholder text. This is specific content about in-office requirement. So we can include Schedule section with that info. Benefits: They mention "For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits." Also earlier: "You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits." That's benefits info. So we can include Benefits section summarizing: bonus program, equity award, other compensation, 401(k) plan, various benefits. We should not include boilerplate like "Explore our benefits." but we can keep the substance. We need to avoid duplication. Also remove "Ready to Ride?" etc. Now produce HTML fragment. Structure:

      About the role

      ... (the paragraph)

      Responsibilities

      • ...
      ...

      Requirements

      ...

      Qualifications

      ...

      Pay

      ... salary ranges and bonus/equity/401k etc.

      Benefits

      ... bonus program, equity award, other compensation, 401(k) plan, various benefits.

      Schedule

      ... in-office requirement.

      Make sure not to include any markdown fences. Now craft the text. About the role paragraph: combine sentences. Ensure we keep all info. Let's write:

      As a Senior Security Technologist on the team, you will help lead security diligence, integration, and operational security efforts for acquisitions, strategic investments, and subsidiary environments. You will collaborate with subsidiary security personnel to uplift their security operations to Uber minimum standards post‑acquisition. This role combines advisory, operational, and hands‑on security engineering responsibilities, including automation, incident response, and pragmatic risk management in fast‑moving, evolving environments. Successful candidates are excited to build practical solutions, improve security operations, and help teams navigate complex integration challenges. You will write code using approved AI tooling, automate workflows, deploy security tooling to subsidiary environments, integrate systems, improve telemetry visibility, and help operationalize security capabilities across newly acquired target companies and evolving environments. You will also help respond to security incidents involving subsidiaries and acquired companies, partnering closely with internal security teams and business stakeholders to rapidly reduce risk and improve resilience. The ideal candidate is comfortable building automation and integrations, investigating security incidents, deploying security tooling, leveraging AI‑assisted engineering workflows, and communicating technical risk to leadership. You'll be successful in this role if you enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments. Travel may occasionally be required to support acquisition diligence or integration efforts, but is generally infrequent and based on business needs.

      Now Responsibilities bullets. We'll list each as
    • . Make sure to keep punctuation. Responsibilities list: - Assess the cyber security maturity of acquisition targets across infrastructure, on-prem, cloud, identity, endpoint, SaaS, and engineering environments - Identify key technical and operational risks, domain specific security gaps, and integration challenges associated with acquired organizations - Design and implement scalable security integrations for newly acquired companies and subsidiaries - Build automation, tooling, and workflows to accelerate security onboarding and operational visibility - Write code and scripts to integrate systems, normalize telemetry, automate remediation activities, and improve operational efficiency - Use AI-assisted engineering and automation techniques to improve analysis, integration, and security operations workflows - Deploy and operationalize security services such as: endpoint detection and response (EDR), vulnerability management, logging and telemetry collection, incident response monitoring for subsidiaries, identity and access management, device management, cloud security monitoring, asset inventory and visibility tooling - Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response and Investigations, Information Technology (IT) Privacy, Legal, Corporate Development, and business stakeholders during acquisition and integration activities - Respond to and help coordinate security incidents involving subsidiaries and acquired entities - Support containment, remediation, recovery, and long-term hardening efforts during incident response scenarios Now Requirements list: - 5+ years of experience in security engineering, cloud security, infrastructure security, detection and response, or related technical security roles - Bachelor's degree in Computer Science, Information Security, Engineering,