Senior Corporate Security Engineer

Role Overview

Senior Corporate Security Engineer at Deliveroo. You will lead the design and operation of security controls that protect Deliveroo’s internal networks, workforce identities, endpoints, and corporate systems. You’ll work globally with security teams across US, EU, and APAC, operating with a high degree of autonomy and setting technical direction for complex security initiatives end-to-end.

Responsibilities

• Architecture & Control Implementation: Design, deploy, and maintain corporate security controls such as:
  • Phishing-resistant MFA
  • Just-In-Time (JIT) access
  • RBAC (role-based access control)
  • Zero-trust architectures, device/identity-bound proofing, and modern network isolation
• Identity & Endpoint Security Focus:
  • Lead IAM, endpoint security (EDR/XDR), and related control strategy
  • Support network security, logging, and detection engineering
  • Enable and secure corporate SaaS applications
• Tooling Ownership: Own and manage security systems across the corporate environment, including deployments, configurations, and API integrations
• Technical Leadership: Implement strategy for:
  • Endpoint device trust
  • Data Loss Prevention (DLP)
  • Intellectual property storage
  • SaaS application security
• Automation & Engineering: Write scripts/tools to automate security workflows, incident response tasks, and audit evidence collection
• Cross-Functional Collaboration: Integrate security tools into everyday IT/business workflows and help teams adopt secure baselines (e.g., CIS Benchmarks)
• Mentorship: Mentor junior/mid engineers and clearly explain technical concepts to non-technical stakeholders

Requirements

• Bachelor’s degree in Computer Science/Cybersecurity/IT (or equivalent)
• 5+ years in security engineering/corporate security/detection & response or related
• Hands-on IAM administration experience (e.g., Okta, Google Workspace) and deep hands-on experience with Google Workspace products
• Practical cloud security experience with AWS and GCP
• Infrastructure-as-code experience: Terraform
• Modern authentication standards: FIDO2, WebAuthn, SAML, OAuth 2.0, OpenID Connect
• Endpoint security experience across macOS, Windows, and Linux using MDM and EDR/XDR
• SIEM and/or SOAR operations and detection logic tuning
• Vulnerability management and patch governance experience

Nice-to-have / Framework Alignment

• Security control alignment with frameworks such as CIS Critical Security Controls and NIST Cybersecurity Framework (CSF)