Security Operations Centre Specialist II

About the role

Join the global Security Operations Centre supporting DoorDash, Deliveroo and Wolt. You will work 24/7 to protect data, people and partners, leveraging AI‑driven tools and incident response processes.

Key responsibilities

• Operate in a 24/7 SOC with night, weekend and on‑call shifts, handling high‑severity alerts.
• Tri­age real‑time phishing, malware, network attacks and privacy incidents within defined SLAs.
• Serve as the primary point of contact for medium‑to‑high severity alerts, providing tactical direction and escalation.
• Contribute to security playbooks and develop AI‑driven runbooks for automated alert triage.
• Assist Threat Intelligence, Incident Response and Digital Forensics teams in broader investigations.
• Design and implement SOAR workflows to streamline incident handling.
• Help create cybersecurity awareness programmes for employees.

Required profile

• 4–6 years of experience in a SOC environment, resolving high‑priority alerts.
• Proven ability to optimise detection logic as a technical lead.
• Hands‑on experience with AWS security configuration and cloud security best practices.
• Familiarity with security compliance frameworks such as ISO27001, NIS2, GDPR and PCI‑DSS.
• Experience coordinating with security teams across the US, UK and EU.

Required skills

• AWS security configuration
• SOAR (Security Orchestration, Automation and Response)
• GSO
• EDR/XDR platforms
• Splunk
• SQL query development
• Cloud security configurations
• Knowledge of ISO27001, NIS2, GDPR, PCI‑DSS standards

What we offer

• Comprehensive healthcare, well‑being programmes and generous parental leave.
• Pensions, generous annual leave and paid time off for charitable causes.