Sr Security Technologist - Third Party Risk

Job-:
Technical Security

Location:

San Francisco, CA, United States;
Seattle, WA, United States;
Sunnyvale, CA, United States

Schedule:

Full time, Level 5

Posted:
About the Role As a Senior Security Technologist on Uber’s Third-Party Risk Management (TPRM) team, you will help operate, engineer, and transform Uber’s TPRM program. You will help ensure third-party security risks are effectively identified, assessed, monitored, and managed across Uber’s global vendor ecosystem while building the technology and automation needed to operate the program s role requires an automation-first, engineering mindset.

You will approach operational and risk challenges by first asking how they can be solved through code, automation, AI, better data, or system integrations, rather than adding manual processes. You will be expected to prototype and build solutions yourself, automate repeatable work, and partner with engineering teams on larger capabilities that fundamentally improve how third-party risk is managed.

You will also serve as a lead for day-to-day TPRM operations. You will oversee our managed service provider (MSP), manage escalations and complex vendor issues, support third-party security incidents, and partner across Engineering Security, Legal, Privacy, Procurement, and business teams to drive appropriate risk decisions. You will use the problems, friction, and patterns you see in the program to identify what should be automated, redesigned, or eliminated.

You will help move TPRM beyond manual, point-in-time assessments toward a more automated, continuous, data-driven, and intelligence-led approach. This includes building automation and integrations, developing AI-assisted workflows and agents, improving the TPRM platform and data ecosystem, and bringing together internal and external security signals to enable faster and better risk decisions.

The ideal candidate is comfortable:writing code and independently building automation, integrations, and technical solutions,identifying manual processes and redesigning them through an automation-first approach,leveraging AI and agentic workflows to solve security and operational problems,leading day-to-day TPRM operations and managing escalations,managing MSP delivery, quality, and performance,assessing third-party security risk and technical security controls,working directly with vendors to resolve complex security and risk issues,supporting third-party security incidents and assessing potential impact,managing and improving TPRM platforms, workflows, and data,and communicating technical risk to leadership and business stakeholders.

You’ll be successful in this role if you can combine security risk expertise with hands-on technical execution—solving today’s operational challenges while continuously engineering better ways for TPRM to operate t You'll DoBuild automation, tooling, agents, and integrations to solve TPRM problems, eliminate repetitive manual work, improve decision quality, and enable the program to scale

Write code and prototype solutions directly, using APIs, security and risk data, AI-assisted development, and other technologies to rapidly solve operational and risk management challenges

Identify recurring operational problems and determine where automation, AI, improved data, or redesigned workflows can replace manual processes

Lead day-to-day TPRM operations, including third-party security assessments, risk decisions, stakeholder and vendor escalations, and delivery against established service levels

Oversee TPRM managed service provider delivery and performance, including workload, quality, capacity, SLAs, issue resolution, and continuous improvement

Manage complex third-party security issues and work directly with vendors and internal…