Senior Technical Program Manager - Security

About the Role

Security at Uber is foundational to the integrity, resilience, and trust of our systems. Our team designs and enforces security controls across a wide range of use cases spanning Product, Engineering, Data Science, and Operations. These controls are critical to protecting Uber's core businesses - including the Rider/Driver Marketplace, Eats, Delivery, Safety, Maps, and more - ensuring that security is embedded from the ground up.

In an environment as dynamic and globally scaled as Uber's, security must be adaptable, proactive, and tightly integrated across every layer of the tech stack. Our focus is on reducing risk, safeguarding sensitive data, and ensuring secure-by-default practices across development, deployment, and operations. This includes preventing threats, enabling secure access, and ensuring continuity and compliance - all of which are essential to maintaining trust with users, partners, and regulators alike.

We are looking for a seasoned Senior Technical Program Manager (TPM) to lead and scale security initiatives that address Uber's most complex and unique challenges. In this role, you will drive large, cross-functional programs that span Security, Privacy, and Compliance across both on-premises and cloud environments.

You will partner closely with teams across Data Platform, Infrastructure, Engineering Security, Product, and Legal, serving as the connective tissue across disciplines to deliver secure, compliant, and scalable solutions. This role requires strong technical depth, strategic program ownership, and a proactive leadership mindset.

As a TPM, you will own the problem space end-to-end, working closely with engineering and product leaders to define and drive solution strategy. Lead high-impact, cross-functional initiatives, coordinating efforts across multiple engineering teams to deliver secure outcomes. Establish and track clear program milestones, KPIs, and success metrics to ensure accountability and transparency. Proactively identify risks, resolve dependencies, and escalate issues as needed to keep execution on track.Drive operational rigor by standardizing best practices, improving execution efficiency, and enabling consistent, repeatable program delivery. Deliver clear and concise executive communications, including regular program updates to senior leadership and stakeholders.

What the Candidate Will Do:

• You are a strategic, execution-focused TPM who can fluidly move between big-picture thinking and detailed program execution. You lead complex, cross-functional security initiatives - often with tight deadlines and high ambiguity - and are a trusted connector across the company. Intuitive, driven, organized, and direct, you build strong relationships with stakeholders at all levels, identify communication gaps early, and create clarity in fast-moving environments. You bring empathy and integrity to tough conversations and establish trust through consistent delivery and follow-through.
• Lead large-scale security programs that span teams, organizations, and technical stacks. You work with engineering leaders to define scope, estimate work, set milestones, and manage cross-functional dependencies across product, legal, and operations teams.
• Driving clarity and execution, using KPIs, milestones, and risk assessments to track progress. You proactively remove obstacles, manage escalations, and help teams stay focused on outcomes.
• Understanding technical systems and trade-offs at the architectural level. You ask the right questions to clarify priorities, evaluate alternative solutions, and enable teams to deliver secure, scalable systems.
• Balancing user needs with technical constraints, especially in high-impact security areas such as access control, infrastructure resilience, incident response, and compliance. You make data-driven decisions with end-user trust in mind.
• Owning strategic and operational planning cycles, helping lead cross-functional discussions that shape long-term roadmaps, investment planning, hiring goals, and organizational alignment.
• Scaling best practices across the organization, improving how we run programs and ship secure systems. You contribute to building reusable program frameworks and mentor TPMs and engineering leaders in program management excellence.
• Communicating effectively at all levels, including regular updates to executives and stakeholders that highlight progress, surface risks, and reinforce accountability

• 5+ years of experience as a Technical Program Manager or Engineering Manager in security-focused roles, or in adjacent areas such as infrastructure, platform engineering, or data systems.
• Strong understanding of security domains such as application security, cloud security, offensive security, compliance, data protection, and broader enterprise security use cases.
• Proven track record of driving complex, cross-functional programs from inception to launch.
• Familiarity with cloud and data infrastructure, offensive security, application security, and software development lifecycle (SDLC).
• Excellent written and verbal communication skills, with the ability to influence technical and executive stakeholders.
• Technical degree with years of software development experience and exposure to large scale infrastructure in a distributed environment
• Solid technical aptitude and an ability to understand technical designs, challenges, and risks. Engineers enjoy working closely with you.
• Excellent written and verbal communication skills and exceptional emotional intelligence.
• Proven strong cross-team and cross-org stakeholder management.
• Analytical and truth seeking. Ability to understand complex concepts and make reasoned decisions objectively.
• Metrics driven: Experience determining effective program KPI's and using them to measure program success and issues.
• Strong organizational skills to juggle many tasks without losing sight of the highest priority items.
• Excellent in identifying process gaps, measuring progress, and balancing engineering and product efficiency with process overhead.

• Experience with large-scale security migrations and secure software deployments in dynamic, multi-language microservices environments.
• Experience developing and supporting automated approaches for implementing and testing security controls within microservice and DevOps workflows.
• Background in security engineering, cloud/infrastructure security, or managing security-focused engineering teams.