Security Operations Centre Specialist

Our Global Structure

Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.

Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out.

About the Role

The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success.

What you’ll be doing

• Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
• Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
• Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
• Lead the development and continuously improve operational documentation, processes and playbooks
• Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
• Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
• Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
• Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Keep up to date with current security trends, advisories, publications and security research across the threat landscape