About the Company
Deliveroo is part of DoorDash, bringing together teams across a global organization. Its marketplace operates in a fast-moving environment.
Responsibilities
•Design, deploy, and maintain corporate security controls, including phishing-resistant MFA, JIT access, RBAC, zero-trust architectures, device and identity-bound proofing, and network isolation
•Own corporate security systems, managing deployments, configurations, and API integrations
•Lead and implement technical strategy for endpoint device trust, DLP, intellectual property storage, SaaS application security, and other corporate security controls
•Write scripts and build tools to automate security workflows, incident response tasks, and audit evidence collection
•Integrate security tools into everyday workflows with IT and business operations
•Guide non-security teams in adopting secure baselines such as CIS Benchmarks
•Mentor junior and mid-level engineers, explain technical concepts to non-technical staff, and improve engineering standards
•Define technical direction, make architectural decisions, and deliver complex security initiatives end to end
•Balance risk reduction with usability and maintain controls without impeding employee productivity
•Work with IT, Legal, Privacy, Engineering, and business stakeholders to embed security practices across the organization
Requirements
•Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience
•5+ years' experience in Security Engineering, Corporate Security, Detection & Response, or a related field
•Hands-on experience administering IAM platforms such as Okta or Google Workspace
•Deep hands-on experience with Google Workspace products
•Practical hands-on experience with cloud platforms such as AWS or GCP
•Practical experience with Infrastructure as Code, such as Terraform
•Experience implementing FIDO2, WebAuthn, SAML, OAuth 2.0, and OpenID Connect
•Practical experience securing macOS, Windows, and Linux endpoints using MDM and EDR/XDR tooling
•Experience operating SIEM and/or SOAR platforms and tuning detection logic
•Experience with vulnerability management and patch governance
•Ability to write production-quality automation scripts
•Demonstrated experience leading cross-functional technical initiatives
Nice to Have
•SASE or Zero Trust Network Access platforms
•Deploying applications into K8 and Docker environments
•DLP and SaaS security governance
•Advanced detection engineering or SOAR playbook development
•ISO 27001 or SOC 2 audits
•Relevant certifications such as CISSP, CISM, or GIAC
Conditions
No conditions stated in the posting.
