Security Operations Centre Specialist
At Deliveroo, it is our mission to build the definitive food company. In order to do that, we’re building a company where everyone can belong, grow and do the best work of their lives.
As a Security Operations Centre Specialist you’ll be part of a growing Security Operations team who are focused on detecting attacks against a backdrop of an ever-advancing cyber threat landscape with automation at the heart of everything we do. You’ll be responsible for improving our threat detection capabilities and provide support to our incident response, forensics and threat intelligence processes spanning the breadth of the cyber kill chain. While we have some practices in place, you’ll need to help design and mature processes and technology requirements to best support our security maturity journey.
The role is a unique opportunity to be part of the overall Security Operations strategy where you can harness our existing process and technology investments and bring new ways of working to help us protect our employees, customers, riders and restaurants. As we continue to grow our business, your specialist capabilities will play a key part in our story.
What you’ll be doing
Be the first line of defence investigating our real-time security incidents on a 24/7 shift basis
Triage and investigate security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents
Act as a primary point of contact for any medium-high severity incident; providing direction and escalation where needed
Contribute to the design, development and review of threat-detection use-cases to identify suspicious activity across a cloud-centric environment
Maintain security operations playbooks
Support wider security incident investigations involving Threat Intelligence and Digital Forensics stakeholders
Support the development of orchestration and automation across key platforms to streamline security incident response processes
Keep up to date with current security trends, advisories, publications and security research across the threat landscape
Requirements
Demonstrable hands-on experience as part of a Security Operations Centre, using monitoring platforms and triaging real-time alerts
Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation
Hands-on experience writing complex Splunk and SQL queries
Practical experience operating defensive security solutions
Demonstrable experience of system administration, particularly across Linux
Proven knowledge of optimal cloud security configurations, particularly across AWS
Demonstrable coding experience, with familiarity across multiple languages
Exceptional communication skills and a collaborative, knowledge-sharing mindset
Familiarity of security compliance standards, e.g. ISO27001, GDPR and PCI-DSS
Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business
Able to act as lead incident handler when required and manage high priority incidents
Expert at distilling clarity from complex situations to brief stakeholders at all levels of technical knowledge
Work as part of a 24/7 shift rotation, acting as a primary escalation point of contact for serious incidents
Support incidents and initiatives led by Sr. Specialists and also help mentor and train more Security Analysts
Coordinate with the UK central security function as needed
Preferred, but not required
Natural leadership with experience in technical project management
Understanding of IAM cloud security principles
Experience with web and mobile-app offensive security techniques
Experience with Google workspace
Experience in a DevOps environment with familiarity of CI/CD pipelines
Hands-on experience with container technologies and orchestration services
Knowledge of cloud security data encryption standards and principles
Why Deliveroo?
Our mission is to be the definitive food company. We are transforming the way the world eats by making food more convenient and accessible. We give people the opportunity to eat what they want, when and where they want it.
We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, seeking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.
Workplace & Diversity
At Deliveroo we know that people are the heart of the business and we prioritise their welfare. We offer a wide range of competitive benefits in areas including health, family, finance, community, convenience, growth and relocation.
We believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest growing startups in an incredibly exciting space.
