D

Delivery Hero

Global online food delivery marketplace

Director Security Operations - Security Engineering

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeBerlin, Germany

About the Job

Requirements

  • Proven leadership of Security Operations Centers (SOC) and Incident Response (CSIRT) functions in large, complex enterprise or technology environments, balancing day-to-day incident demands with long-term improvements.
  • Deep experience managing complex, critical security incidents and building proactive threat hunting programs.
  • Strong working knowledge of modern cloud-native Security Information and Event Management (SIEM) and SecOps platforms, including telemetry ingestion, detection-as-code, and automated response playbooks (SOAR).
  • Ability to communicate clearly and manage crises, turning complex technical incidents into actionable risk insights for executives, regional CISOs, and legal partners.
  • Proven success recruiting, retaining, and growing senior engineers and managers, including managers of managers, and running global follow-the-sun or escalation models.
  • Experience setting and driving security operations metrics, such as mean time to detect (MTTD), mean time to respond (MTTR), and detection coverage against MITRE ATT&CK.

Responsibilities

  • Lead the CSIRT and SOC managers and their teams by setting clear expectations, giving 360-degree feedback, and building an engaging, diverse workplace.
  • Set the security operations strategy and run an objectives and key results (OKR) and roadmap process aligning threat detection, incident response, and threat intelligence.
  • Modernize detection and response with Google SecOps (SIEM) and advanced telemetry, turning threat actor tactics, techniques, and procedures (TTPs) into high-fidelity detections that reduce noise and lower MTTD and MTTR.
  • Coach teams in incident handling and act as incident commander for critical incidents, owning stakeholder communication and post-incident follow-up.
  • Partner with local CISOs and security leads across all entities to set consistent monitoring and incident response standards.
  • Use data to diagnose issues and demonstrate measurable risk reduction against MITRE ATT&CK, with diligent budget governance.

Desired Qualifications

  • Experience operating within complex global platforms, food or logistics delivery networks, or multi-tenant cloud ecosystems.
  • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or advanced GIAC credentials (GCIH, GCFA, GNFA).
  • Experience monitoring and responding to threats across multi-cloud environments, including Amazon Web Services (AWS) and Google Cloud Platform (GCP).

About the Company

Delivery Hero

Global online food delivery marketplace

Delivery Hero SE runs a global online marketplace for food delivery and on-demand services. It connects customers with restaurants, local shops, and delivery-only Dmarts through mobile apps and websites, with orders placed and paid online and deliveries handled by its logistics network. The platform makes money mainly from commissions on each order, delivery fees, advertising, and quick-commerce services for groceries and household items. Its approach combines a wide geographic reach with multiple lines of business (restaurant delivery, groceries, and logistics), often growing by acquiring local competitors, to control both the marketplace and delivery operations and capture a large share of local on-demand commerce.

Company size
10,001+
Company stage
IPO
Headquarters
Berlin, Germany
Founded
2011

Recently Posted Jobs

Explore more opportunities at Delivery Hero

See more jobs