Security Operations Centre Specialist II

Deliveroo; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare

Well-being

Parental leave

Pensions

Generous annual leave

Job summary

Deliveroo information security team is expanding its Security Operations Centre to protect our global platforms and data. The SOC Specialist will triage alerts, investigate real-time events, and escalate incidents while contributing to playbooks and AI-driven runbooks.

Collaboration with Threat Intelligence and Incident Response teams is essential as we enhance cloud security and incident readiness. The role requires strong hands-on SOC experience, experience with Splunk, SOAR, EDR/XDR, SQL

Qualifications

• 4–6 years of experience in a SOC environment and resolving high-priority alerts.
• Leading optimization of detection logic as a technical lead.
• Hands-on experience in a Security Operations Centre, monitoring platforms and alert triage.
• Experience with AWS security config, SOAR, EDR/XDR, Splunk, and SQL queries.
• Knowledge of cloud security configurations, especially AWS.
• Strong teamwork and willingness to share knowledge.
• Familiarity with ISO27001, NIS2, GDPR, and PCI-DSS.

Responsibilities

• Work in a 24/7 Global Security Operations Center with night/weekend/on-call shifts.
• Triage and investigate real-time alerts (phishing, malware, network, privacy incidents).
• Lead as primary contact for medium-to-high severity alerts and escalate as needed.
• Develop AI-driven runbooks for automated alert triage.
• Assist in broader incident investigations with Threat Intelligence and IR teams.
• Help build SOAR workflows to streamline incident handling.
• Contribute to cybersecurity awareness programs for employees.

Skills

SOC experience

Threat detection

Incident response

AWS security

SOAR workflows

Collaboration

Tools

Splunk

EDR/XDR

SOAR

SQL queries

AWS security config

Job description

About the team

Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out.

About the role

The Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success.

What you'll be doing

• Work in a 24/7 Global Security Operations Center, including scheduled night, weekend, and on-call shifts to support high and critical issues.

• Act as the first line of defense by triaging and investigating real-time alerts involving phishing, malware, network attacks, and privacy incidents within defined SLAs.

• Serve as the primary point of contact for medium-to-high severity alerts, providing tactical direction and escalating as required.

• Contribute to security playbooks and assist in developing AI-driven runbooks for automated alert triage.

• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.

• Assist in developing SOAR (Security Orchestration, Automation, and Response) workflows to streamline incident handling.

• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

Requirements

• 4–6 years of experience in a SOC environment, successfully resolving high-priority security alerts by identifying the root cause.

• Supporting the optimization of detection logic as a technical lead.

• Demonstrable hands-on experience as part of a Security Operations Centre, using monitoring platforms and triaging real-time alerts.

• Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.

• Proven knowledge of optimal cloud security configurations, particularly across AWS

• Exceptional collaborative team player and a knowledge-sharing mindset.

• Familiarity of security compliance standards, e.g. ISO27001, NIS2, GDPR and PCI-DSS

• Lead low and medium security Incidents.

• Support incidents and initiatives led by Sr. Specialists and also help mentor and train more Security Analysts

Coordinate with the US, UK and EU central security teams as required.

Why Deliveroo

Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it.

We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.

Workplace & Benefits

At Deliveroo we know that people are the heart of the business and we prioritise their welfare.

Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice.

• healthcare
• well-being
• parental leave
• pensions
• generous annual leave allowances, including time off to support a charitable cause of your choice

Benefits are country-specific, please ask your recruiter for more information.

Diversity

At Deliveroo, we believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest-growing businesses in a rapidly growing industry.

We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please don't hesitate to let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.