Staff Security Engineer
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience. • 8+ years of hands-on experience in Security Engineering, Corporate Security, or Architecture roles. • Proven track record of operating at a Staff/Principal level, successfully leading multi-quarter, cross-functional engineering projects. • Expert-level understanding of IAM architecture, modern authentication standards, and Zero Trust principles. • Deep technical experience designing and deploying SASE/ZTNA solutions and enterprise EDR platforms at scale. • Advanced proficiency in at least one programming language (Python, Go) and extensive experience with Infrastructure as Code (Terraform, Pulumi). • Strong executive communication skills; ability to justify technical decisions and budget requests to non-technical leadership. • 10+ years of overarching cybersecurity experience in high-growth or complex enterprise environments. • Experience managing the technical integration of corporate security systems during Mergers & Acquisitions (M&A). • Deep understanding of OS internals across macOS, Windows, and Linux to guide advanced endpoint threat detection engineering. • Experience designing centralized logging and threat detection pipelines handling massive data volumes (using tools like Splunk, Snowflake, or Panther). • Advanced security certifications (e.g., CISSP-ISSAP, GIAC Enterprise Defender, or equivalent architectural certifications).
Responsibilities
• Technical Vision & Strategy: Define and own the long-term technical roadmap for corporate security architecture. Transition legacy systems to modern, frictionless security models (e.g., passwordless authentication, Zero Trust Network Access). • Identity & Access Management (IAM): Be the focal point for engineering and business best practices, aligned with IAM technical leads. Developing resilient and security rich identity controls across ecosystems. • Endpoint & Mobile Security: Design the fleet security strategy for thousands of devices. You will engineer deep integrations between Mobile Device Management (Jamf Pro, Microsoft Intune, Workspace ONE) and EDR/XDR platforms (CrowdStrike, SentinelOne, Microsoft Defender) to enforce automated device trust and compliance. • Network & SASE Architecture: Lead the design and global deployment of Secure Access Service Edge (SASE) and ZTNA networks (Zscaler, Palo Alto Prisma Access, Cloudflare One, Tailscale) to securely connect our distributed workforce to internal applications without relying on legacy VPNs. • Security Operations & Engineering: Build out high-signal threat detection pipelines. You will design the architecture for our security data lake and SIEM/SOAR capabilities using tools like Splunk, Panther, Elastic Security, or Tines/Torq for automated incident response. • Cloud & SaaS Security: Secure our internal cloud footprint (AWS, GCP, or Azure) and implement SaaS Security Posture Management (SSPM) tools to monitor third-party app integrations and prevent corporate data loss. • Engineering Excellence: Set the standard for code quality and infrastructure-as-code (IaC) within the security team. Use Python, Go, Terraform, or Pulumi to build custom automation where off-the-shelf products fail. • Sponsorship & Mentorship: Actively sponsor and mentor senior (I5) and mid-level engineers. Write technical standards, lead architecture reviews, and raise the overall engineering capability of the Information Security organisation.
Benefits
• At Deliveroo we know that people are the heart of the business and we prioritise their welfare. Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country-specific, please ask your recruiter for more information.
Similar Jobs
No credit card. Takes 10 seconds.