corporate security engineer

Deliveroo is part of DoorDash, bringing together teams across a global organization. Its marketplace operates in a fast-moving environment.

• Design, deploy, and maintain corporate security controls, including phishing-resistant MFA, JIT access, RBAC, zero-trust architectures, device and identity-bound proofing, and network isolation
• Own corporate security systems, managing deployments, configurations, and API integrations
• Lead and implement technical strategy for endpoint device trust, DLP, intellectual property storage, SaaS application security, and other corporate security controls
• Write scripts and build tools to automate security workflows, incident response tasks, and audit evidence collection
• Integrate security tools into everyday workflows with IT and business operations
• Guide non-security teams in adopting secure baselines such as CIS Benchmarks
• Mentor junior and mid-level engineers, explain technical concepts to non-technical staff, and improve engineering standards
• Define technical direction, make architectural decisions, and deliver complex security initiatives end to end
• Balance risk reduction with usability and maintain controls without impeding employee productivity
• Work with IT, Legal, Privacy, Engineering, and business stakeholders to embed security practices across the organization

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience
• 5+ Years’ experience in Security Engineering, Corporate Security, Detection & Response, or a related field
• Hands-on experience administering IAM platforms such as Okta or Google Workspace
• Deep hands-on experience with Google Workspace products
• Practical hands-on experience with cloud platforms such as AWS or GCP
• Practical experience with Infrastructure as Code, such as Terraform
• Experience implementing FIDO2, WebAuthn, SAML, OAuth 2.0, and OpenID Connect
• Practical experience securing macOS, Windows, and Linux endpoints using MDM and EDR/XDR tooling
• Experience operating SIEM and/or SOAR platforms and tuning detection logic
• Experience with vulnerability management and patch governance
• Ability to write production-quality automation scripts
• Demonstrated experience leading cross-functional technical initiatives
• Candidates of all backgrounds are welcome, regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief
• Будет плюсом: SASE or Zero Trust Network Access platforms, deploying applications into K8 and Docker environments, DLP and SaaS security governance, advanced detection engineering or SOAR playbook development, ISO 27001 or SOC 2 audits, relevant certifications such as CISSP, CISM, or GIAC

• Условий в вакансии нет