Sullivan in August told Reuters that his security team totaled around 500 employees.
Google says Uber has more than 12,000 employees. Uber is not a typical company, but how do other tech companies compare?
Google says Uber has more than 12,000 employees. Uber is not a typical company, but how do other tech companies compare?
All snark aside, I'd guess that the vast amount of Uber security staff's role is investigating driver fraud. Uber grew so immensely fast because they offered compelling sign up inducements to drivers, and in lots of cases those were easy to game. It's why Uber got caught "fingerprinting" iPhones by Apple so they could detect whether the same phone was being used to sign up for multiple driver accounts to double dip the signup bonus programs.
I thought most companies separate out pure infosec from anti-fraud? Some orgs may house both under the bubble of risk management but there's a big difference between a security engineer and an anti-fraud analyst.
But you have to look at the threat models, the value of what you're protecting, and the surface areas that you expose. Without comparing those, no useful inferences can be drawn.
And when you have breaches and things like that, is it because you didn't have enough security employees? Or is it rather because its focus was bad? Or the employees were bad? Or because the branch tasked to secure the network was bad?