Director, Security Operations (Security Engineering)

Delivery Hero SE; Berlin; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model (Berlin campus 2days

27 days holiday (+2 extra days in year

Health checkups, meditation, yoga, gym

Employee Share Purchase Plan

Sabbatical bank

Public transportation ticket discount

Life & accident insurance

Corporate pension plan

Educational budget 1000€

Language courses

Parental support

Udemy Business access

Food vouchers / meal vouchers

Job summary

Delivery Hero SE in Berlin seeks a Director of Security Operations to set strategic direction for threat detection, incident response and risk management across our global platform.

You will lead CSIRT and SOC teams, collaborate with local CISOs, and drive modernization using Google SecOps, SIEM, and SOAR, delivering measurable risk reductions.

Qualifications

• Proven leadership of SOC and CSIRT in large enterprise or tech environments.
• Experience managing critical security incidents and proactive threat hunting.
• Strong knowledge of cloud-native SIEM and SecOps platforms with detection-as-code.
• Excellent crisis management and executive-facing communication.
• Proven ability to recruit and develop senior engineers and managers.
• Experience with security metrics like MTTD/MTTR and MITRE ATT&CK.

Responsibilities

• Lead CSIRT and SOC managers and teams; set expectations and provide feedback.
• Define security operations strategy and an OKR/roadmap aligned to threat detection and response.
• Modernize detection using Google SecOps and telemetry; translate threat intel into detections.
• Act as incident commander for critical incidents and manage stakeholder communications.
• Collaborate with CISOs across entities to standardize monitoring and response.

Skills

Leadership of SOC & CSIRT

Crisis management

Cloud-native SIEM

Threat hunting program

Executive risk communications

Talent development & recruiting

Tools

SOAR platforms

Job description

Company Description

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in.

Job Description

Clear goals. Strong teams. Real results. As Director, Security Operations, you’ll set the direction for how Delivery Hero detects, investigates and responds to threats across every entity and platform. You’ll move our CSIRT and SOC teams from baseline monitoring to an intelligence-driven, proactive defense, built on Google SecOps. You’ll report to the CISO and be the person who leads when a critical incident hits.

You’ll lead our existing CSIRT and SOC teams, based at our global headquarters in Berlin, and scale capabilities where needed. You’ll work closely with local CISOs and security leads to give millions of daily customers one consistent standard of protection.

Join the team that protects Delivery Hero’s ecosystem, customer trust, and global platforms. In the Security Team, you’ll tackle high-impact challenges across cyber defense, application security, cloud governance, and risk mitigation. Your work will directly safeguard millions of users and vendors worldwide, ensuring our technology scales securely and complies with global standards as we deliver amazing experiences every day.

Lead the CSIRT and SOC managers and their teams: set clear expectations, give 360 feedback and build an engaging, diverse place to work.

Set the strategy for security operations and run an OKR and roadmap process that aligns threat detection, incident response and threat intelligence.

Modernize detection and response with Google SecOps (SIEM) and advanced telemetry, turning threat actor TTPs into high-fidelity detections that cut noise and reduce MTTD and MTTR.

Coach teams to excellent incident handling and act as incident commander for critical incidents, owning stakeholder communication and post-incident follow-up.

Partner with local CISOs and security leads across all entities to set consistent monitoring and incident response standards.

Use data to diagnose issues and show measurable risk reduction against MITRE ATT&CK, with diligent budget governance.

Qualifications

• Proven leadership of Security Operations Centers (SOC) and Incident Response (CSIRT) functions in large, complex enterprise or tech environments, balancing day-to-day incident demands with long-term improvements.
• Deep experience managing complex, critical security incidents and building proactive threat hunting programs.
• Strong working knowledge of modern cloud-native SIEM and SecOps platforms, including telemetry ingestion, detection-as-code and automated response playbooks (SOAR).
• Clear communication and crisis management skills, turning complex technical incidents into actionable risk insights for executives, regional CISOs and legal partners.
• Proven success recruiting, retaining and growing senior engineers and managers, including managers of managers, and running global follow-the-sun or escalation models.
• Experience setting and driving security operations metrics, such as MTTD, MTTR and detection coverage against MITRE ATT&CK.

Nice to have

• Experience operating within complex global platforms, food or logistics delivery networks, or multi-tenant cloud ecosystems.
• Certifications such as CISSP, CISM, or advanced GIAC credentials (GCIH, GCFA, GNFA).
• Experience monitoring and responding to threats across multi-cloud environments (AWS, GCP).

Additional Information

Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you’re in good shape, then we’re in good shape.

Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week.

We offer 27 days holiday with an extra day on 2nd and 3rd year of service.

Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Yoga, Gym.

Cash. Dough. Cheddar. Whatever you call it, we’ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan.

Look up and go for it. We will support you in developing yourself and your career: 1.000 € Educational Budget, Language Courses, Parental Support.

The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Online Canteen, Corporate Discounts.

We will support you in developing yourself and your career growth opportunities: 1.000 € Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.

Health Checkups, Meditation & Gym.

Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan.

Digital Meal Vouchers and Food Vouchers.

Wondering what relocating to Berlin is like? In this article, we’ve put together 10 things you should know about moving to Berlin and how Delivery Hero can support you. You can also visit our relocation hub and check out more information about moving to Berlin.

Heads up: exact benefits may look a little different for intern, working student, fixed-term, and part-time roles.

We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.

We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience—just let us know with an email to our Inclusion Officer at [e-mail].

You’re welcome to share your pronouns (he/she/they) right from the first contact so we can address you respectfully from our first contact.