Senior Enterprise Security Engineer

About the role

Deliveroo, now part of DoorDash, is looking for a Senior Enterprise Security Engineer in London. You will lead the design and operation of security controls protecting internal networks, workforce identities, endpoints and corporate systems, working with security teams across the US, EU and APAC. The role has a high degree of autonomy, defining technical direction and architecture while balancing risk reduction with usability.

The focus is on Identity and Access Management (IAM), endpoint security (EDR), network security, logging and detection engineering, and secure SaaS enablement, aligned to frameworks such as the CIS Critical Security Controls and the NIST Cybersecurity Framework.

Key responsibilities

• Design, deploy and maintain core controls such as phishing-resistant MFA, Just-In-Time access, role-based access control, zero-trust architectures, device and identity binding and network isolation.
• Own a suite of corporate security tools, managing deployments, configurations and API integrations.
• Lead the technical strategy for endpoint trust, data loss prevention, intellectual property storage and SaaS application security.
• Write scripts and build tools to automate security workflows, incident response and audit evidence collection.
• Work with IT and business operations to embed security in daily workflows and guide other teams to adopt secure baselines such as CIS Benchmarks.
• Mentor junior and mid-level engineers and raise engineering standards.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology or equivalent practical experience.
• 5+ years in Security Engineering, Corporate Security, Detection & Response or a related field.
• Demonstrated experience leading cross-functional technical initiatives.

Required skills

• Hands-on administration of IAM platforms (e.g. Okta, Google Workspace) and deep experience with Google Workspace.
• Cloud platforms (AWS, GCP) and infrastructure-as-code (e.g. Terraform).
• Modern authentication (FIDO2, WebAuthn, SAML, OAuth 2.0, OpenID Connect).
• Securing macOS, Windows and Linux endpoints with MDM and EDR/XDR, and SIEM/SOAR platforms.
• Vulnerability management and patch governance, and production-quality automation scripts.
• Desirable: SASE or Zero Trust, K8s and Docker, DLP and SaaS security, ISO 27001 or SOC 2 audit support, and certifications such as CISSP, CISM or GIAC.