Director, Security Operations (Security Engineering)

Delivery Hero; Berlin; Híbrido; EUR 150.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

27 days holiday

Educational budget 1000 €

Life & Accident Insurance

Corporate Pension Plan

Public Transportation Discount

Employee Share Purchase Plan

Descripción de la vacante

Delivery Hero, headquartered in Berlin, seeks a Director of Security Operations to lead CSIRT and SOC teams across the organization. You will scale capabilities globally, set security operation strategies, and partner with local CISOs to ensure consistent protection for millions of customers and vendors.

You will drive threat detection, incident response, and risk mitigation across cloud environments, while guiding teams and engaging executives with clear risk insights and a proactive security

Formación

• Lead SOC/CSIRT operations for a large enterprise or tech environment.
• Build proactive threat hunting programs and manage complex incidents.
• Implement and optimize cloud-native SIEM and SecOps tooling (SOAR).
• Translate incidents into actionable risk insights for executives and partners.
• Grow senior engineers and managers, including global escalation models.
• Define security metrics like MTTD/MTTR and detection coverage.

Responsabilidades

• Lead the CSIRT and SOC managers and their teams; set expectations and provide feedback.
• Set strategy for security operations; manage OKR and roadmap for threat detection and incident response.
• Modernize detection/response using Google SecOps (SIEM) and telemetry to reduce noise.
• Act as incident commander for critical incidents; manage stakeholder communications and post-incident follow-up.
• Collaborate with local CISOs and security leaders to standardize monitoring and response practices.
• Use data to demonstrate risk reduction against MITRE ATT&CK with budget governance.

Conocimientos

SOC/CSIRT leadership

Threat hunting

Incident response

Cloud-native SIEM

Crisis communication

Security metrics

Herramientas

SOAR platforms

SIEM tooling

Descripción del empleo

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people.

As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly and stay human along the way.

It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in.

Job Description

Clear goals. Strong teams. Real results. As Director, Security Operations, you’ll set the direction for how Delivery Hero detects, investigates and responds to threats across every entity and platform. You’ll move our CSIRT and SOC teams from baseline monitoring to an intelligence-driven, proactive defense, built on Google SecOps. You’ll report to the CISO and be the person who leads when a critical incident hits.

You’ll lead our existing CSIRT and SOC teams, based at our global headquarters in Berlin, and scale capabilities where needed. You’ll work closely with local CISOs and security leads to give millions of daily customers one consistent standard of protection.

Join the team that protects Delivery Hero’s ecosystem, customer trust, and global platforms. In the Security Team, you’ll tackle high-impact challenges across cyber defense, application security, cloud governance, and risk mitigation. Your work will directly safeguard millions of users and vendors worldwide, ensuring our technology scales securely and complies with global standards as we deliver amazing experiences every day.

• Lead the CSIRT and SOC managers and their teams: set clear expectations, give 360 feedback and build an engaging, diverse place to work.
• Set the strategy for security operations and run an OKR and roadmap process that aligns threat detection, incident response and threat intelligence.
• Modernize detection and response with Google SecOps (SIEM) and advanced telemetry, turning threat actor TTPs into high-fidelity detections that cut noise and reduce MTTD and MTTR.
• Coach teams to excellent incident handling and act as incident commander for critical incidents, owning stakeholder communication and post-incident follow-up.
• Partner with local CISOs and security leads across all entities to set consistent monitoring and incident response standards.
• Use data to diagnose issues and show measurable risk reduction against MITRE ATT&CK, with diligent budget governance.

Qualifications

• Proven leadership of Security Operations Centers (SOC) and Incident Response (CSIRT) functions in large, complex enterprise or tech environments, balancing day-to-day incident demands with long-term improvements.
• Deep experience managing complex, critical security incidents and building proactive threat hunting programs.
• Strong working knowledge of modern cloud-native SIEM and SecOps platforms, including telemetry ingestion, detection-as-code and automated response playbooks (SOAR).
• Clear communication and crisis management skills, turning complex technical incidents into actionable risk insights for executives, regional CISOs and legal partners.
• Proven success recruiting, retaining and growing senior engineers and managers, including managers of managers, and running global follow-the-sun or escalation models.
• Experience setting and driving security operations metrics, such as MTTD, MTTR and detection coverage against MITRE ATT&CK.

Nice to have

• Experience operating within complex global platforms, food or logistics delivery networks, or multi-tenant cloud ecosystems.
• Certifications such as CISSP, CISM, or advanced GIAC credentials (GCIH, GCFA, GNFA).
• Experience monitoring and responding to threats across multi-cloud environments (AWS, GCP).

Additional Information

Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you’re in good shape, then we’re in good shape.

• Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week
• We offer 27 days holiday with an extra day on 2nd and 3rd year of service
• Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you’re in good shape, then we’re in good shape
• Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Yoga, Gym
• Cash. Dough. Cheddar. Whatever you call it, we’ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan
• Look up and go for it. We will support you in developing yourself and your career: 1.000 € Educational Budget, Language Courses, Parental Support
• The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Online Canteen, Corporate Discounts

Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you’re in good shape, then we’re in good shape.

• Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week
• We offer 27 days holiday with an extra day on 2nd and 3rd year of service
• We will support you in developing yourself and your career growth opportunities: 1.000 € Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.
• Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation & Gym.
• Cash. Dough. Cheddar. Whatever you call it, we’ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan
• The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers and Food Vouchers.
• Wondering what relocating to Berlin is like? In this article, we’ve put together 10 things you should know about moving to Berlin and how Delivery Hero can support you. You can also visit our relocation hub and check out more information about moving to Berlin.
• Ready to prepare for your interview? Check out the list of the 5 most common interview questions and answers created in collaboration with our recruiters.

Heads up: exact benefits may look a little different for intern, working student, fixed-term, and part-time roles.

We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.

We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience—just let us know with an email to our Inclusion Officer at [e-mail].

You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.