Global SOC Specialist II — AI-Driven Security Ops

Deliveroo; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare

Well-being

Parental leave

Pensions

Generous annual leave

Job summary

Deliveroo information security team is expanding its Security Operations Centre to protect our global platforms and data. The SOC Specialist will triage alerts, investigate real-time events, and escalate incidents while contributing to playbooks and AI-driven runbooks.

Collaboration with Threat Intelligence and Incident Response teams is essential as we enhance cloud security and incident readiness. The role requires strong hands-on SOC experience, experience with Splunk, SOAR, EDR/XDR, SQL

Qualifications

• 4–6 years of experience in a SOC environment and resolving high-priority alerts.
• Leading optimization of detection logic as a technical lead.
• Hands-on experience in a Security Operations Centre, monitoring platforms and alert triage.
• Experience with AWS security config, SOAR, EDR/XDR, Splunk, and SQL queries.
• Knowledge of cloud security configurations, especially AWS.
• Strong teamwork and willingness to share knowledge.
• Familiarity with ISO27001, NIS2, GDPR, and PCI-DSS.

Responsibilities

• Work in a 24/7 Global Security Operations Center with night/weekend/on-call shifts.
• Triage and investigate real-time alerts (phishing, malware, network, privacy incidents).
• Lead as primary contact for medium-to-high severity alerts and escalate as needed.
• Develop AI-driven runbooks for automated alert triage.
• Assist in broader incident investigations with Threat Intelligence and IR teams.
• Help build SOAR workflows to streamline incident handling.
• Contribute to cybersecurity awareness programs for employees.

Skills

SOC experience

Threat detection

Incident response

AWS security

SOAR workflows

Collaboration

Tools

Splunk

EDR/XDR

SOAR

SQL queries

AWS security config

Job description

Deliveroo information security team is expanding its Security Operations Centre to protect our global platforms and data. The SOC Specialist will triage alerts, investigate real-time events, and escalate incidents while contributing to playbooks and AI-driven runbooks.

Collaboration with Threat Intelligence and Incident Response teams is essential as we enhance cloud security and incident readiness. The role requires strong hands-on SOC experience, experience with Splunk, SOAR, EDR/XDR, SQL