Description
The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt.
You will work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
Key responsibilities:
- Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
- Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
- Lead the development and continuously improve operational documentation, processes and playbooks.
- Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
- Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
- Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
- Feed into the risk framework of emerging and observed threats from intelligence and / or incidents.
- Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
- Keep up to date with current security trends, advisories, publications and security research across the threat landscape.
- Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation.
- Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees.
Requirements:
- 6–8 years of experience in SOC, demonstrating success in managing security incidents and delivering platform optimisations while acting as a technical mentor and lead for shift operations.
- Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.
- Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
- Practical experience ideating, configuring, managing defensive security solutions and technical project management.
- Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.
- Exceptional collaborative team player and a knowledge-sharing mindset.
- Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.
- Able to communicate effectively during or after any incident update to both technical and non-technical stakeholders.
- Coordinate with the US, UK and EU central security teams as required.
Preferred skills:
- Understanding of IAM cloud security principles.
- Experience in a DevOps environment with familiarity of CI/CD pipelines.
- Hands-on experience with container technologies and orchestration services.
- Knowledge of cloud security data encryption standards and principles.