Delivery Hero

3 weeks ago

Staff Security Engineer, CSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Lead end-to-end response for high-severity security incidents as Incident Commander within the CSIRT. Own blameless post-incident reviews, drive remediation, and communicate risk and decisions to stakeholders under pressure. Build automation and in-house tooling to reduce triage time and eliminate manual toil across hybrid-cloud, distributed microservices, and payment/PII-heavy environments. Improve operational metrics (MTTD/MTTR), run tabletop/purple-team exercises, and mentor teams.

Location: Berlin

Workplace: Hybrid

Employment Type: Full time · Permanent

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Serve as Incident Commander for high-severity security incidents, directing investigation from detection through recovery and ensuring evidence meets regulatory reporting requirements.
•Lead blameless post-incident reviews and drive durable remediation and systemic resilience improvements.
•Design and build automation, in-house tooling, and scalable workflows to reduce triage time and eliminate repetitive manual processes.
•Communicate clearly with stakeholders during critical incidents, translating technical realities into risk, impact, and decision frameworks.
•Run tabletop simulations and purple team engagements, and participate in a predictable on-call rotation for out-of-hours escalations.

Pay and Benefits

Perks:Paid LeaveLearning BudgetParental LeaveGym MembershipMeal Allowance

Key Requirements

•7+ years of broad cybersecurity experience with deep security fundamentals, plus 5+ years in a SOC or CSIRT environment.
•Proven experience acting as a Security Incident Commander, managing incident timelines, decisions, and cross-functional communications.
•Advanced incident response expertise across hybrid-cloud environments, distributed microservices, and systems handling PII and payment data.
•Operational mastery of SIEM, EDR, Cloud Security, SOAR, and WAF/DDoS protection solutions.
•Strong software engineering ability to build production-quality tooling (e.g., Python, Go, Rust) and cloud-native incident response across AWS/GCP plus Kubernetes, Docker, and Infrastructure-as-Code (e.g., Terraform).

Experience:7+ yearsCybersecuritySOCCSIRTFintechE-commerce

Skills:Calm leadershipStakeholder communicationMentorshipStrategic thinkingData-driven mindset

Certifications:GIAC GCIHGIAC GCFAGIAC GCIACISSPOSCP

Languages:English

Tech Stack:PythonGoRustSIEMEDRSOARWAFDDoSAWSGCPKubernetesDockerTerraformGitGitHubCI/CDMTTDMTTRGDPRPCI-DSS

Company Brief

Delivery Hero

Global online food-ordering and local delivery platform operating multiple regional brands (e.g., Foodpanda, Glovo, Talabat) across 50–70+ countries, supplying food and quick-commerce deliveries via marketplace and logistics services.

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Berlin, Germany

Founded: 2011

Glassdoor: 3.4

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Delivery Hero

3 weeks ago

Staff Security Engineer, CSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: Berlin

Workplace: Hybrid

Employment Type: Full time · Permanent

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Serve as Incident Commander for high-severity security incidents, directing investigation from detection through recovery and ensuring evidence meets regulatory reporting requirements.
•Lead blameless post-incident reviews and drive durable remediation and systemic resilience improvements.
•Design and build automation, in-house tooling, and scalable workflows to reduce triage time and eliminate repetitive manual processes.
•Communicate clearly with stakeholders during critical incidents, translating technical realities into risk, impact, and decision frameworks.
•Run tabletop simulations and purple team engagements, and participate in a predictable on-call rotation for out-of-hours escalations.

Pay and Benefits

Perks:Paid LeaveLearning BudgetParental LeaveGym MembershipMeal Allowance

Key Requirements

•7+ years of broad cybersecurity experience with deep security fundamentals, plus 5+ years in a SOC or CSIRT environment.
•Proven experience acting as a Security Incident Commander, managing incident timelines, decisions, and cross-functional communications.
•Advanced incident response expertise across hybrid-cloud environments, distributed microservices, and systems handling PII and payment data.
•Operational mastery of SIEM, EDR, Cloud Security, SOAR, and WAF/DDoS protection solutions.
•Strong software engineering ability to build production-quality tooling (e.g., Python, Go, Rust) and cloud-native incident response across AWS/GCP plus Kubernetes, Docker, and Infrastructure-as-Code (e.g., Terraform).

Experience:7+ yearsCybersecuritySOCCSIRTFintechE-commerce

Skills:Calm leadershipStakeholder communicationMentorshipStrategic thinkingData-driven mindset

Certifications:GIAC GCIHGIAC GCFAGIAC GCIACISSPOSCP

Languages:English

Tech Stack:PythonGoRustSIEMEDRSOARWAFDDoSAWSGCPKubernetesDockerTerraformGitGitHubCI/CDMTTDMTTRGDPRPCI-DSS

Company Brief

Delivery Hero

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Berlin, Germany

Founded: 2011

Glassdoor: 3.4

Website LinkedIn Glassdoor