Opportunity at
DeliverooSenior Corporate Security Engineer
This senior corporate security engineering post is in London and involves close work with security teams in the US, EU and APAC. The engineer leads the…
Career Tools
About This Role
This senior corporate security engineering post is in London and involves close work with security teams in the US, EU and APAC. The engineer leads the design and running of safeguards for Deliveroo's internal networks, employee identities, endpoints and business systems. The aim is to cut risk while keeping staff productive. Senior engineers work with substantial independence, setting technical direction, making architecture calls and delivering complex security programmes from concept…
Job Description
This senior corporate security engineering post is in London and involves close work with security teams in the US, EU and APAC. The engineer leads the design and running of safeguards for Deliveroo's internal networks, employee identities, endpoints and business systems. The aim is to cut risk while keeping staff productive.
Senior engineers work with substantial independence, setting technical direction, making architecture calls and delivering complex security programmes from concept to completion. The domain covers identity and access management, endpoint detection and response, network protection, log analysis, detection work and safe adoption of SaaS applications. Controls are mapped to the CIS Controls set and to NIST CSF. The engineer works with Legal, Privacy, IT, Engineering and business units to make security habitual across the organisation.
Typical tasks include rolling out phishing-resistant multi-factor authentication, just-in-time privileges, role-based permissions, zero-trust patterns, identity-bound device verification and network segmentation. The engineer owns several corporate security platforms, sets strategy for endpoint trust, data loss prevention, protection of intellectual property and SaaS posture, and scripts automation for incident handling and audit evidence gathering. Mentoring less-experienced engineers and translating technical matters for non-specialists are part of the job.
Baseline expectations include at least five years in security engineering, corporate security or detection and response. Applicants should have administered identity platforms such as Okta or Google Workspace, worked with AWS or GCP, and used Terraform in practice. Knowledge of contemporary sign-in standards, endpoint management on macOS, Windows and Linux, SIEM or SOAR operations, and vulnerability governance is needed. Useful extras include SASE or ZTNA exposure, container platforms, ISO 27001 or SOC 2 audit support, and certifications such as CISSP, CISM or GIAC.
Responsibilities
- Design, deploy and sustain core corporate security controls
- Act as technical owner for many corporate security tools and their integrations
- Set strategy for endpoint trust, DLP, intellectual property protection and SaaS security
- Script automation for response workflows and compliance evidence capture
- Help IT and operations teams build security tooling into daily routines
- Push non-security teams toward secure configuration baselines
- Coach engineers and explain technical topics to non-specialists
Requirements
- Bachelor's degree in computing, cybersecurity or IT, or equivalent hands-on background
- Five or more years in security engineering, corporate security or detection and response
- Hands-on administration of Okta or Google Workspace
- Practical cloud work on AWS or GCP and infrastructure coding with Terraform
- Familiarity with modern sign-in standards including WebAuthn, FIDO2, SAML and OpenID Connect
- Protecting Mac, Windows and Linux machines through MDM and EDR or XDR tooling
- Running SIEM or SOAR platforms and tuning detections
- Vulnerability management and patch oversight
- Production-grade scripting for automation
- Leading cross-team technical programmes
Qualifications
- Experience with SASE or ZTNA products
- Kubernetes and Docker application deployment
- DLP and SaaS governance
- Detection engineering or SOAR playbook authoring
- ISO 27001 or SOC 2 audit support
- Certifications such as CISSP, CISM or GIAC
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role located?
The listing places the role in London and marks it as on-site. The team works with colleagues in the US, EU and APAC.
How many years of experience are required?
At least five years in security engineering, corporate security, or detection and response.
Are certifications needed?
They are not mandatory. CISSP, CISM and GIAC are listed as desirable.
Is a salary stated?
The posting does not state a salary figure.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.