Sr Security Operations Centre Specialist

Deliveroo; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Deliveroo is seeking a Senior Security Operations Centre Specialist to shape our global SOC strategy across a footprint including DoorDash, Deliveroo, and Wolt. You will protect data, people and partners while optimizing AI investments and security processes.

You will lead a 24/7 SOC, mentor staff, develop runbooks, and drive continuous improvements across threat detection, incident response, and compliance in cloud environments.

Qualifications

• 6–8 years of SOC experience managing security incidents and platform optimisations.
• Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.
• Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
• Practical experience ideating, configuring, managing defensive security solutions and technical project management.
• Committed to continuous improvement and knowledge sharing.
• Able to communicate effectively with technical and non-technical stakeholders during incidents.

Responsibilities

• Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
• Lead the triage and investigation of security alerts within SLAs.
• Mentor a team of SOC Specialists, providing guidance and feedback to deliver a best-in-class security service.
• Lead the development and continuously improve operational documentation, processes and playbooks.
• Build and manage autonomous AI runbooks to automate and scale alert triage capabilities.
• Lead incident response and escalation, ensuring lessons learned translate into improvements.
• Support design, development and review of threat-detection use-cases for cloud environments.
• Feed into the risk framework of emerging threats from intelligence and incidents.
• Support wider security investigations involving Threat Intelligence and Digital Forensics stakeholders.
• Keep up to date with security trends and advisories across the threat landscape.
• Leverage metrics to improve security posture and identify optimisation opportunities.
• Collaborate on cybersecurity awareness programs for employees.

Skills

Cloud security

Threat hunting

Incident response

Security analytics

Team mentorship

Tools

AWS security config

SOAR

GSO

EDR/XDR

Splunk

SQL queries

Job description

Job Summary

The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success.

Responsibilities

• Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
• Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
• Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
• Lead the development and continuously improve operational documentation, processes and playbooks
• Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
• Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
• Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
• Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Keep up to date with current security trends, advisories, publications and security research across the threat landscape
• Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation
• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

Requirements

• 6-8 years of experience in SOC, demonstrating success in managing security incidents and delivering platform optimisations while acting as a technical mentor and lead for shift operations.
• Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.
• Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
• Practical experience ideating, configuring, managing defensive security solutions and technical project management
• Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.
• Exceptional collaborative team player and a knowledge-sharing mindset.
• Working knowledge of security compliance standards, e.g. ISO27001, GDPR, NIS2 and PCI-DSS.
• Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.
• Able to communicate effectively during or after any incident update to both technical and non-technical stakeholders.
• Coordinate with the US, UK and EU central security teams as required.

Preferred qualifications

• Understanding of IAM cloud security principles
• Experience in a DevOps environment with familiarity of CI/CD pipelines
• Hands-on experience with container technologies and orchestration services
• Knowledge of cloud security data encryption standards and principles

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.