Director, Security Operations (Security Engineering)

Stack

Responsibilities

• ▹Lead and mentor the CSIRT and SOC teams, building a global operations organization across all Delivery Hero entities
• ▹Define the multi-year roadmap for threat detection, incident response and threat intelligence to reduce organizational risk
• ▹Optimize the detection pipeline using Google SecOps (SIEM) and advanced telemetry: high-fidelity detections, less noise, shorter MTTD and MTTR
• ▹Act as the ultimate escalation point and incident commander for critical security incidents, including stakeholder communication and post-incident governance
• ▹Establish threat intelligence capabilities that turn threat actor TTPs into proactive detection and defenses
• ▹Partner with local CISOs and security leads to keep monitoring and incident response standards consistent across subsidiaries
• ▹Drive data-informed operational reporting and evaluate capabilities with frameworks such as MITRE ATT&CK to demonstrate risk reduction

Requirements

• ▹A track record of leading Security Operations Centers (SOC) and Incident Response (CSIRT) functions in large, complex enterprise or tech environments
• ▹Deep incident response and threat hunting expertise, including managing complex critical incidents and architecting proactive threat hunting programs
• ▹Hands-on familiarity with modern cloud-native SIEM and SecOps platforms, including telemetry ingestion, detection-as-code and automated response playbooks (SOAR)
• ▹Excellent communication and crisis management skills, translating technical incidents into actionable risk insights for executives, regional CISOs and legal partners
• ▹Experience mentoring analysts, optimizing operational workflows and managing global follow-the-sun or escalation models
• ▹Experience establishing and driving security operations metrics (MTTD, MTTR, MITRE ATT&CK detection coverage)
• ▹Strategic vision: balancing immediate operational fire-fighting with long-term improvements

Nice to have

• ▹Background operating within complex global platforms, food/logistics delivery networks or multi-tenant cloud ecosystems
• ▹High-level certifications such as CISSP, CISM or advanced GIAC (GCIH, GCFA, GNFA)
• ▹Familiarity with monitoring and responding to threats across multi-cloud environments (AWS, GCP)
• ▹Experience with Google SecOps / Chronicle

Soft skills

What we offer

• ▹Hybrid working model with 2 days a week on the Berlin campus
• ▹27 days holiday, with an extra day in the 2nd and 3rd year of service
• ▹Health checkups, meditation, yoga, gym cash
• ▹Employee Share Purchase Plan, Sabbatical Bank, public transportation ticket discount
• ▹Life and accident insurance, corporate pension plan
• ▹€1,000 educational budget, language courses, parental support
• ▹Digital meal vouchers, food vouchers, online canteen, corporate discounts

About the company

Delivery Hero is a pioneering local delivery platform operating in around 65 countries. Headquartered in Berlin, it is one of Europe's largest tech platforms and has been listed on the Frankfurt Stock Exchange since 2017.