L5 Lead Security Operations Centre Specialist

Deliveroo; Hyderabad; On-site; INR 2,000,000 - 3,000,000; Full time

Benefits offered by this job

Healthcare benefits

Parental leave

Generous annual leave

Support for charitable causes

Job summary

Deliveroo in Hyderabad is seeking a dynamic Senior Security Operations Centre Specialist Lead to shape their global Security Operations strategy. In this role, you will lead a team of specialists, oversee critical security operations, and enhance the organization’s threat detection capabilities in a fast-paced environment. Candidates should possess extensive SOC experience, strong collaboration skills, and familiarity with AWS security tools. The position offers competitive benefits, including healthcare and generous leave policies.

Qualifications

• 7–9 years of SOC experience as a technical lead.
• Building threat detection capabilities in a cloud-centric organization.
• Hands-on with AWS security configuration.

Responsibilities

• Lead a team of SOC specialists and analysts.
• Oversee team development and performance metrics.
• Manage incident response and escalation.

Skills

SOC experience

AWS security

Threat detection capabilities

Collaboration

Incident response communication

Tools

Splunk

SQL

SOAR

GSO

EDR/XDR

Job description

About the team

Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out.

About the role

The Senior Security Operations Centre Specialist Lead offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success.

What you’ll be doing

• Lead a team of SOC specialists and analysts, balancing technical work with total ownership of your shift.
• Act as the primary decision-maker for critical security matters while overseeing team development, performance, and operational metrics.
• Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
• Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
• Lead the development and continuously improve operational documentation, processes and playbooks.
• Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
• Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
• Support the design, development and review of threat‑detection use‑cases to identify suspicious activity across our cloud environment.
• Feed into the risk framework of emerging and observed threats from intelligence and/or incidents (e.g., post‑incident activity/repair items).
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Keep up to date with current security trends, advisories, publications and security research across the threat landscape.
• Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation.
• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasizing incident reporting and best practices.

Requirements

• 7–9 years of SOC experience, with a proven track record of acting as a technical lead and managing shift operations.
• Proven experience building threat detection capabilities in a cloud‑centric, fast‑moving organisation.
• Hands‑on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
• Practical experience ideating, configuring, managing defensive security solutions and technical project management.
• Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.
• Exceptional collaborative team player and a knowledge‑sharing mindset.
• Working knowledge of security compliance standards, e.g. ISO27001, GDPR, NIS2 and PCI‑DSS.
• Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.
• Able to communicate effectively during or after any incident update to both technical and non‑technical stakeholders.

Coordinate with the US, UK and EU central security teams as required.

Benefits

We offer many benefits in areas including healthcare, well‑being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country‑specific; please ask your recruiter for more information.

Diversity, equity and inclusion

We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.