Sr Security Technologist - Technical Security

About the Role and Team

The Mergers & Acquisitions (M&A) Security team at Uber evaluates, secures, integrates, and supports acquired companies and subsidiaries across a global technology ecosystem. As a Senior Security Technologist you will lead security diligence, integration, and operational security efforts for acquisitions, strategic investments, and subsidiary environments. The role blends advisory, operational, and hands‑on security engineering, including automation, incident response, and pragmatic risk management in fast‑moving environments.

Responsibilities

• Lead technical security diligence for mergers, acquisitions, integrations, and divestitures, including subsidiary operations.
• Assess the cyber‑security maturity of acquisition targets across infrastructure, on‑prem, cloud, identity, endpoint, SaaS, and engineering environments.
• Identify key technical and operational risks, domain‑specific security gaps, and integration challenges associated with acquired organizations.
• Design and implement scalable security integrations for newly acquired companies and subsidiaries.
• Build automation, tooling, and workflows to accelerate security onboarding and operational visibility.
• Write code and scripts to integrate systems, normalize telemetry, automate remediation activities, and improve operational efficiency.
• Use AI‑assisted engineering and automation techniques to improve analysis, integration, and security‑operations workflows.
• Deploy and operationalize security services such as endpoint detection and response (EDR), vulnerability management, logging and telemetry collection, incident‑response monitoring for subsidiaries, identity and access management, device management, cloud security monitoring, and asset‑inventory visibility tooling.
• Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response & Investigations, IT Privacy, Legal, Corporate Development, and business stakeholders during acquisition and integration activities.
• Respond to and coordinate security incidents involving subsidiaries and acquired entities.
• Support containment, remediation, recovery, and long‑term hardening efforts during incident‑response scenarios.
• Develop reusable playbooks, frameworks, and integration patterns to improve scalability and consistency across the M&A security program.
• Help define long‑term strategy for subsidiary security governance and federated security services.
• Contribute to executive‑level reporting and technical risk communication related to acquisition and subsidiary security posture.
• Represent the M&A Security team at executive‑level briefings, presenting security risks that translate to business strategy.
• Identify strategic security solutions that reduce overall risk to Uber while enabling the business.

Basic Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
• Experience in security engineering, cloud security, infrastructure security, detection and response, or related technical security roles.
• Hands‑on engineering and troubleshooting experience in modern enterprise environments.
• Experience applying risk‑management principles in complex cybersecurity environments, including both cloud and on‑premises infrastructure.
• Experience writing code or automation using languages such as Python, Go, Bash, or similar.
• Experience integrating or deploying security technologies in cloud or enterprise environments.
• Experience working with modern cloud infrastructure and SaaS ecosystems.
• Familiarity with AI‑assisted development workflows and modern automation techniques.
• Experience supporting or responding to security incidents.
• Understanding of cloud infrastructure and security, identity and access management, endpoint security, vulnerability management, logging and telemetry systems, enterprise SaaS platforms, and networking fundamentals.
• Ability to communicate complex technical concepts clearly to both technical and non‑technical audiences.
• Comfort navigating evolving priorities and collaborating across teams in fast‑moving environments.

Preferred Qualifications

• Experience supporting mergers & acquisitions, subsidiary security, or enterprise integration efforts.
• Strong information assurance management principles and practices.
• Assess security risk across interconnected cloud and on‑premises environments.
• Understanding how security controls interact, overlap, and compensate for one another.
• Apply risk‑based decision‑making to evaluate control effectiveness and overall security posture.
• Partner with technical and business teams to align security requirements with operational needs.
• Experience building internal security tooling or operational automation platforms.
• Experience integrating acquired environments into centralized security operations.
• Familiarity with detection engineering, SIEM platforms, or telemetry pipelines.
• Experience assessing engineering and software‑development security practices.
• Experience with infrastructure‑as‑code or cloud automation frameworks.
• Experience using LLMs or AI tooling to improve engineering or security workflows.
• Incident‑response, investigative, and problem‑solving experience.
• Written communication and program‑management experience.
• Ability to balance pragmatic execution with long‑term security strategy.

Pay

For Seattle, WA‑based roles, the base salary range is USD $180,000 – $200,000 per year. The role is eligible for Uber’s bonus program, may include an equity award, and other forms of compensation. All full‑time employees can participate in a 401(k) plan.

Benefits

Employees are eligible for a range of benefits, including health, wellness, and additional compensation programs.