Senior Security Operations Centre Specialist
Deliveroo is hiring a Senior Security Operations Centre Specialist in Hyderabad, India. Level rates it ; you can apply on Deliveroo.
Level's read on this job
- Works on AI ●●●○ is how Level rates this role: the daily work is on AI products, without building the model.
- The posting mentions incident response, security operations and threat intelligence among its tools and skills.
- Level classes it as a senior role.
- Deliveroo has 204 other open roles on Level.
- Posted within the past two weeks.
AI in this role
Lead global SOC operations, triage security incidents, and build autonomous AI runbooks to scale alert triage capabilities.
Our Global Structure
Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.
Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out.
About the Role
The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success.
What you’ll be doing
- Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
- Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
- Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
- Lead the development and continuously improve operational documentation, processes and playbooks
- Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
- Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
- Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
- Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
- Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
- Keep up to date with current security trends, advisories, publications and security research across the threat landscape
- Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation
- Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.
Requirements
- 6–8 years of experience in SOC, demonstrating success in managing security incidents and delivering platform optimisations while acting as a technical mentor and lead for shift operations.
- Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.
- Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
- Practical experience ideating, configuring, managing defensive security solutions and technical project management
- Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.
- Exceptional collaborative team player and a knowledge-sharing mindset.
- Working knowledge of security compliance standards, e.g. ISO27001, GDPR, NIS2 and PCI-DSS.
- Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.
- Able to communicate effectively during or after any incident update to both technical and non-technical stakeholders.
- Coordinate with the US, UK and EU central security teams as required.
Preferred, but not required
- Understanding of IAM cloud security principles
- Experience in a DevOps environment with familiarity of CI/CD pipelines
- Hands-on experience with container technologies and orchestration services
- Knowledge of cloud security data encryption standards and principles
Why Deliveroo?
At Deliveroo, you’ll do work that matters—solving real-world problems in a three-sided marketplace that’s constantly evolving.
We’re food lovers, problem solvers, community organisers, proud parents, and more, brought together by a shared drive to make things better. Working here you can expect to:
🔧 Solve meaningful problems at real scale
Work on a complex, always-on marketplace that impacts millions every day.
🌱See your impact, fast
Ship, test and improve ideas quickly in a low-hierarchy, high-ownership
environment.
🧠Grow through challenge and ownership
Take on big, ambiguous problems and accelerate your career with strong support.
🌎A culture built for builders
High standards, collaboration, flexible working and continuous learning.
Our Global Structure
Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.
Diversity, Equity and Inclusion
At Deliveroo, we know that a great workplace reflects the world around us and that true diversity and inclusion make us stronger, more creative, and better at what we do. We’re committed to fostering an environment where everyone can do their best work and feel they belong.
We believe in equality of opportunity and welcome candidates from all backgrounds regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief.
If you have a disability or long-term health condition and need support to apply for one of our roles, or require any reasonable adjustments during the recruitment process, you’ll have the opportunity to let us know once you’ve submitted your application. We’ll share details on how to request support so we can ensure you have a fair and equitable experience.
If you’re excited about making a real impact in a fast-moving marketplace and growing your career alongside ambitious, supportive teams, we’d love to hear from you!
Beware of recruitment scams: DASH Brands will never ask you to pay money or share sensitive financial information during hiring — learn more about DASH Brands' legitimate recruiting process at careersatdoordash.com/recruitment-scam-awareness.
How we rate this
Senior Security Operations Centre Specialist at Deliveroo rates 65 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.
Works on AI. The daily work is on AI products, without building the model.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- Tell me about a project where incident response was part of your work. What did you do?
- Tell me about a project where security operations was part of your work. What did you do?
- Tell me about a project where threat intelligence was part of your work. What did you do?
- Tell me about a project where soc was part of your work. What did you do?
- Tell me about a project where python was part of your work. What did you do?
Adapt your resume
- List these exact terms on your resume: Incident Response, Security Operations, Threat Intelligence, Soc, and Python. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
- Show where AI is part of your daily process, not a one-off project. This role expects it to be a running habit.
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.
Get new operations jobs (Works on AI ●●●○ or higher) by email
One email a week with the new operations jobs (Works on AI ●●●○ or higher), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Operations roles that work on AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step