Sr Security Technologist - Mergers & Acquisitions

The Mergers & Acquisitions (M&A) Security team at Uber is responsible for evaluating, securing, integrating, and supporting acquired companies and subsidiaries across a diverse global technology ecosystem. As a Senior Security Technologist on the team, you will help lead security diligence, integration, and operational security efforts for acquisitions, strategic investments, and subsidiary environments. You will collaborate with subsidiary security personnel to uplift their security operations to Uber minimum standards post-acquisition.

This role combines advisory, operational, and hands‑on security engineering responsibilities, including automation, incident response, and pragmatic risk management in fast‑moving, evolving environments. Successful candidates are excited to build practical solutions, improve security operations, and help teams navigate complex integration challenges.

You will write code using approved AI tooling, automate workflows, deploy security tooling to subsidiary environments, integrate systems, improve telemetry visibility, and help operationalize security capabilities across newly acquired target companies and evolving environments. You will also help respond to security incidents involving subsidiaries and acquired companies, partnering closely with internal security teams and business stakeholders to rapidly reduce risk and improve resilience.

The ideal candidate is comfortable building automation and integrations, investigating security incidents, deploying security tooling, leveraging AI‑assisted engineering workflows, and communicating technical risk to leadership. You'll be successful in this role if you enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments. Travel may occasionally be required to support acquisition diligence or integration efforts, but is generally infrequent and based on business needs.

• Lead technical security diligence for mergers, acquisitions, integrations, and divestitures, to include subsidiary operations

• Assess the cyber security maturity of acquisition targets across infrastructure, on‑prem, cloud, identity, endpoint, SaaS, and engineering environments

• Identify key technical and operational risks, domain specific security gaps, and integration challenges associated with acquired organizations

• Design and implement scalable security integrations for newly acquired companies and subsidiaries

• Build automation, tooling, and workflows to accelerate security onboarding and operational visibility

• Write code and scripts to integrate systems, normalize telemetry, automate remediation activities, and improve operational efficiency

• Use AI‑assisted engineering and automation techniques to improve analysis, integration, and security operations workflows

• Deploy and operationalize security services such as:

• endpoint detection and response (EDR)

• vulnerability management

• logging and telemetry collection

• Incident Response Monitoring for Subsidiaries

• identity and access management

• device management

• cloud security monitoring

• asset inventory and visibility tooling

• Partner with Engineering Security, Enterprise Security, Cloud Security, Security Response and Investigations, Information Technology (IT) Privacy, Legal, Corporate Development, and business stakeholders during acquisition and integration activities

• Respond to and help coordinate security incidents involving subsidiaries and acquired entities

• Support containment, remediation, recovery, and long‑term hardening efforts during incident response scenarios

• Develop reusable playbooks, frameworks, and integration patterns to improve scalability and consistency across the M&A security program

• Help define…