The ideal candidate is comfortable building automation and integrations, investigating security incidents, deploying security tooling, leveraging AI-assisted engineering workflows, and communicating technical risk to leadership. You’ll be successful in this role if you enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments. Travel may occasionally be required to support acquisition diligence or integration efforts, but is generally infrequent and based on business needs.
What you’ll do
Lead technical security diligence for mergers, acquisitions, integrations, and divestitures, to include subsidiary operations
Assess the cyber security maturity of acquisition targets across infrastructure, on-prem, cloud, identity, endpoint, SaaS, and engineering environments
Identify key technical and operational risks, domain specific security gaps, and integration challenges associated with acquired organizations
Design and implement scalable security integrations for newly acquired companies and subsidiaries
Build automation, tooling, and workflows to accelerate security onboarding and operational visibility
Write code and scripts to integrate systems, normalize telemetry, automate remediation activities, and improve operational efficiency
Use AI-assisted engineering and automation techniques to improve analysis, integration, and security operations workflows
Deploy and operationalize security services such as
endpoint detection and response (EDR)
vulnerability management
logging and telemetry collection
Incident Response Monitoring for Subsidiaries
identity and access management
device management
cloud security monitoring
asset inventory and visibility tooling
Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response and Investigations, Information Technology (IT) Privacy, Legal, Corporate Development, and business stakeholders during acquisition and integration activities
Respond to and help coordinate security incidents involving subsidiaries and acquired entities
Support containment, remediation, recovery, and long-term hardening efforts during incident response scenarios
Develop reusable playbooks, frameworks, and integration patterns to improve scalability and consistency across the M&A security program
Help define long-term strategy for subsidiary security governance and federated security services
Contribute to executive-level reporting and technical risk communication related to acquisition and subsidiary security posture
Represent the Mergers and Acquisitions Security team at executive level security briefings presenting security risks that translate to the business strategy
Identify strategic security solutions, when possible, that reduce the overall risk to Uber while enabling the business
Basic Qualifications
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience
Experience in security engineering, cloud security, infrastructure security, detection and response, or related technical security roles
Hands-on engineering and troubleshooting experience in modern enterprise environments
Experience applying risk management principles in complex cybersecurity environments, including both cloud and on-premises infrastructure.
Experience writing code or automation using languages such as Python, Go, Bash, or similar
Experience integrating or deploying security technologies in cloud or enterprise environments
Experience working with modern cloud infrastructure and SaaS ecosystems
Familiarity with AI-assisted development workflows and modern automation techniques
Experience supporting or responding to security incidents
Understanding of
cloud infrastructure and security
identity and access management
endpoint security
vulnerability management
logging and telemetry systems
enterprise SaaS platforms
networking fundamentals
Ability to communicate complex technical concepts clearly to both technical and non-technical audiences
Comfort navigating evolving priorities and collaborating across teams in fast-moving environments
Preferred Qualifications
Experience supporting mergers & acquisitions, subsidiary security, or enterprise integration efforts
Strong information assurance management principles and practices
Assess security risk across interconnected cloud and on-premises environments.
Understand how security controls interact, overlap, and compensate for one another.
Apply risk-based decision-making to evaluate control effectiveness and overall security posture.
Partner with technical and business teams to align security requirements with operational needs
Experience building internal security tooling or operational automation platforms
Experience integrating acquired environments into centralized security operations
Familiarity with detection engineering, SIEM platforms, or telemetry pipelines
Experience assessing engineering and software development security practices
Experience with infrastructure-as-code or cloud automation frameworks
Experience using LLMs or AI tooling to improve engineering or security workflows
Incident response, investigative, and problem-solving experience
Written communication and program management experience
Ability to balance pragmatic execution with long-term security strategy
For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.
You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.
