Senior Security Operations Centre Specialist

About the role

Deliveroo, now part of DoorDash, is looking for a Senior Security Operations Centre Specialist in Hyderabad. The role shapes the global Security Operations strategy across DoorDash, Deliveroo and Wolt, optimising technology and AI investments to protect data, people and partners. It involves a 24/7 global SOC with scheduled night and weekend shifts.

Key responsibilities

• Lead triage and investigation of security alerts such as phishing, malware, network attacks, security hygiene and privacy incidents within specified SLAs.
• Mentor a team of SOC specialists and guide them to deliver a best-in-class security service.
• Develop and continuously improve operational documentation, processes and playbooks.
• Build and manage autonomous AI runbooks to automate and scale alert triage.
• Lead incident response and escalation, turning lessons learned into continuous security improvements.
• Support the design, development and review of threat-detection use cases for the cloud environment.
• Feed emerging threats into the risk framework and support wider incident investigations with Threat Intelligence, Incident Response and Digital Forensics stakeholders.
• Stay up to date with security trends, advisories and research, and use metrics and KPIs to improve security posture.
• Help deliver cybersecurity awareness programmes for employees, focusing on incident reporting and best practices.

Required profile

• 6-8 years of experience in a SOC, with proven success managing security incidents, optimising platforms and mentoring a team and leading shift operations.
• Proven experience building threat detection in a cloud-centric, fast-moving organisation.
• Experience coordinating with US, UK and EU central security teams as required.
• Ability to stay calm under pressure during high-impact incidents and to communicate clearly to technical and non-technical stakeholders.

Required skills

• Hands-on experience with AWS security configuration, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
• Defensive security solutions, technical project management and continuous improvement.
• Working knowledge of ISO27001, GDPR, NIS2 and PCI-DSS.
• Preferred: IAM cloud security, CI/CD pipelines, container technologies and encryption standards.