Job
In this role, you will develop proactive security strategies, lead the CSIRT and SOC teams, optimize threat detection and response processes, and oversee security incidents globally.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- As Director, Security Operations, you'll set the direction for how Delivery Hero detects, investigates and responds to threats across every entity and platform.
- You'll move our CSIRT and SOC teams from baseline monitoring to an intelligence-driven, proactive defense, built on Google SecOps.
- You'll report to the CISO and be the person who takes the lead when a critical incident occurs.
- You'll lead our existing CSIRT and SOC teams, based at our global headquarters in Berlin, and scale capabilities where needed.
- You'll work closely with local CISOs and security leads to give millions of daily customers one consistent standard of protection.
- Join the team that protects Delivery Hero's ecosystem, customer trust, and global platforms.
- In the Security Team, you'll tackle high-impact challenges across cyber defense, application security, cloud governance, and risk mitigation.
- Your work will directly safeguard millions of users and vendors worldwide, ensuring our technology scales securely and complies with global standards as we deliver amazing experiences every day.
- Lead the CSIRT and SOC managers and their teams: set clear expectations, give 360-degree feedback, and build an engaging, diverse workplace.
- Set the strategy for security operations and run an OKR and roadmap process that aligns threat detection, incident response, and threat intelligence.
- Modernize detection and response with Google SecOps (SIEM) and advanced telemetry, turning threat actor TTPs into high-fidelity detections that cut noise and reduce MTTD and MTTR.
- Coach teams to excellent incident handling and act as incident commander for critical incidents, owning stakeholder communication and post-incident follow-up.
- Partner with local CISOs and security leads across all entities to establish consistent monitoring and incident response standards.
- Use data to diagnose issues and demonstrate measurable risk reduction against MITRE ATT&CK, with diligent budget governance.
Our expectations of you
Qualifications
- Proven leadership of Security Operations Centers (SOC) and Incident Response (CSIRT) functions in large, complex enterprise or tech environments, balancing day-to-day incident demands with long-term improvements.
- Strong working knowledge of modern cloud-native SIEM and SecOps platforms, including telemetry ingestion, detection-as-code, and automated response playbooks (SOAR).
- Clear communication and crisis management skills, turning complex technical incidents into actionable risk insights for executives, regional CISOs, and legal partners.
- Proven success recruiting, retaining and growing senior engineers and managers, including managers of managers, and running global follow-the-sun or escalation models.
- Certifications such as CISSP, CISM, or advanced GIAC credentials (GCIH, GCFA, GNFA).
Experience
- Deep experience managing complex, critical security incidents and building proactive threat hunting programs.
- Experience setting and driving security operations metrics, such as MTTD, MTTR, and detection coverage against MITRE ATT&CK.
- Experience operating within complex global platforms, food or logistics delivery networks, or multi-tenant cloud ecosystems.
- Experience monitoring and responding to threats across multi-cloud environments (AWS, GCP).
What we offer
- Make the most of our hybrid working model and join the team for face-to-face connection and collaboration at our beautiful Berlin campus two days a week.
- We offer 27 days of annual leave, plus an extra day in your second and third years of service.
- Get moving and release those wonderful, mind-boosting endorphins: health checkups, meditation, yoga, gym.
- Cash. Dough. Cheddar. Whatever you call it, we'll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan.
- Look it up and go for it. We’ll support your personal and professional development: €1,000 education budget, language courses, parental support.
- The power of getting together over a meal is unmatched. Here are a few ways to make it happen. All the delicious options: digital meal vouchers, food vouchers, an online canteen, and corporate discounts.
Benefits
Food & drink
Work-Life-Integration
Health, fitness & fun
Topics you will work on
Job locations
About your employer
What started as an ambitious idea is now the leading local delivery company. Delivery Hero is present in around 50 countries across four continents and is on a mission to deliver anything, straight to customers’ doors.
- 2011
- English
- Established Company
- Onsite, Hybrid
- Trade
Employer reviews
- Engineering
- 2.8
- Career growth
- 3.2
- Team culture
- 3.3
- Working conditions
- 3.8
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
