# Senior Security Operations Centre Specialist

**Company**: Deliveroo
**Location**: Hyderabad, India
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/deliveroo/jobs/8288907?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_c702beab-f09

## Description

The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt.

You will work in a 24/7 global security operations centre, including scheduled night and weekend shifts.

Key responsibilities:

- Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.

- Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.

- Lead the development and continuously improve operational documentation, processes and playbooks.

- Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.

- Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.

- Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.

- Feed into the risk framework of emerging and observed threats from intelligence and / or incidents.

- Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.

- Keep up to date with current security trends, advisories, publications and security research across the threat landscape.

- Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation.

- Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees.

Requirements:

- 6–8 years of experience in SOC, demonstrating success in managing security incidents and delivering platform optimisations while acting as a technical mentor and lead for shift operations.

- Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.

- Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.

- Practical experience ideating, configuring, managing defensive security solutions and technical project management.

- Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.

- Exceptional collaborative team player and a knowledge-sharing mindset.

- Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.

- Able to communicate effectively during or after any incident update to both technical and non-technical stakeholders.

- Coordinate with the US, UK and EU central security teams as required.

Preferred skills:

- Understanding of IAM cloud security principles.

- Experience in a DevOps environment with familiarity of CI/CD pipelines.

- Hands-on experience with container technologies and orchestration services.

- Knowledge of cloud security data encryption standards and principles.

## Skills

### Required
- AWS security config
- SOAR
- GSO
- EDR/XDR
- Splunk
- SQL queries
- threat detection
- incident response
- security operations

### Nice to have
- IAM cloud security principles
- DevOps
- CI/CD pipelines
- container technologies
- orchestration services
- cloud security data encryption standards

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/deliveroo/jobs/8288907?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)