Senior Security Operations Centre Specialist

Deliveroo

Senior Security Operations Centre Specialist shaping cybersecurity strategy for Deliveroo, DoorDash, and Wolt. Leading incident responses and developing security best practices in a hybrid team structure.

Posted 5/8/2026full-timeHyderabad • 🇮🇳 IndiaSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudCyber SecuritySplunkSQL

About the role

Key responsibilities & impact

Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
Lead the development and continuously improve operational documentation, processes and playbooks
Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
Keep up to date with current security trends, advisories, publications and security research across the threat landscape
Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation
Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

Requirements

What you’ll need

6–8 years of experience in SOC, demonstrating success in managing security incidents and delivering platform optimisations while acting as a technical mentor and lead for shift operations.
Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.
Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
Practical experience ideating, configuring, managing defensive security solutions and technical project management
Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.
Exceptional collaborative team player and a knowledge-sharing mindset.
Working knowledge of security compliance standards, e.g. ISO27001, GDPR, NIS2 and PCI-DSS.
Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.
Able to communicate effectively during or after any incident update to both technical and non-technical stakeholders.
Coordinate with the US, UK and EU central security teams as required.

Benefits

Comp & perks

Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responsethreat detectionsecurity incident managementcloud securityautomationtechnical project managementdefensive security solutionsSQL queriessecurity metricssecurity documentation

Soft Skills

mentoringcollaborationcontinuous improvementcommunicationteam playerknowledge sharingcalm under pressureguidancefeedbackincident reporting

Certifications

ISO27001GDPRNIS2PCI-DSS