Security Engineer

Why Deliveroo

Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it.

We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.

As a Staff Corporate Security Engineer, you are the technical anchor for our internal security posture. At the Staff level, we expect you to look 12 to 24 months ahead, define the architectural vision for our corporate systems, and lead organisation-wide security initiatives from concept to deployment.

You will tackle the most ambiguous and complex security challenges our company faces. You will be responsible for evaluating "build vs. buy" decisions, designing multi-layered security controls, and aligning our technical security strategy with overall business goals. Rather than just operating tools, you will architect the integrations between our Identity Providers, endpoint security platforms, and internal cloud infrastructure to ensure our enterprise is resilient against advanced threats.

• Technical Vision & Strategy: Define and own the long-term technical roadmap for corporate security architecture. Transition legacy systems to modern, frictionless security models (e.g., passwordless authentication, Zero Trust Network Access).

• Identity & Access Management (IAM): Be the focal point for engineering and business best practices, aligned with IAM technical leads. Developing resilient and security rich identity controls across ecosystems.

• Endpoint & Mobile Security: Design the fleet security strategy for thousands of devices. You will engineer deep integrations between Mobile Device Management (Jamf Pro, Microsoft Intune, Workspace ONE) and EDR/XDR platforms (Crowd Strike, Sentinel One, Microsoft Defender) to enforce automated device trust and compliance.

• Network & SASE Architecture: Lead the design and global deployment of Secure Access Service Edge (SASE) and ZTNA networks (Zscaler, Palo Alto Prisma Access, Cloudflare One, Tailscale) to securely connect our distributed workforce to internal applications without relying on legacy VPNs.

• Security Operations & Engineering: Build out high-signal threat detection pipelines. You will design the architecture for our security data lake and SIEM/SOAR capabilities using tools like Splunk, Panther, Elastic Security, or Tines/Torq for automated incident response.

• Cloud & SaaS Security: Secure our internal cloud footprint (AWS, GCP, or Azure) and implement SaaS Security Posture Management (SSPM) tools to monitor third-party app integrations and prevent corporate data loss.

• Engineering Excellence: Set the standard for code quality and infrastructure-as-code (IaC) within the security team. Use Python, Go, Terraform, or Pulumi to build custom automation where off-the-shelf products fail.

• Sponsorship & Mentorship: Actively sponsor and mentor senior (I5) and mid-level engineers. Write technical standards, lead architecture reviews, and raise the overall engineering capability of the Information Security organisation.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.

• 8+ years of hands‑on experience in Security Engineering, Corporate Security, or Architecture roles.

• Proven track record of operating at a Staff/Principal level, successfully leading multi‑quarter, cross‑functional engineering projects.

• Expert‑level understanding of IAM architecture, modern authentication standards, and Zero Trust principles.

• Deep technical experience designing and deploying SASE/ZTNA solutions and enterprise EDR platforms at scale.

• Advanced proficiency in at least one programming language (Python,…