Senior Manager - Infrastructure Security

About Delivery Hero

Delivery Hero is a global leader in local delivery platforms operating across approximately 65 countries with its headquarters in Berlin, Germany. Listed on the Frankfurt Stock Exchange and part of the MDAX index since 2017, the company leverages technology and creativity to deliver fast, efficient, and innovative solutions worldwide.

Role Overview

We are searching for a Senior Manager for Infrastructure Security who will spearhead initiatives to safeguard our cloud and corporate infrastructure. This role emphasizes reducing tangible risks while ensuring business agility. The successful candidate will promote a "Secure by Design" approach, focusing on collaborative engineering, automation of security measures, and scalable platform security.

Key Responsibilities

• Lead and nurture a mission-driven engineering team prioritizing technical expertise, automation, and continuous career growth.
• Develop and implement a strategic roadmap to enhance infrastructure security maturity, focusing on risk mitigation and operational efficiency across global cloud and corporate environments.
• Collaborate with technical teams to empower them with the necessary tools, insights, and knowledge to manage their own security responsibilities effectively.
• Shift from reactive security audits to proactive automation by introducing policy-as-code and admission control mechanisms that prevent misconfigurations before deployment.
• Create standardized, version-controlled global security baselines to replace inconsistent configurations throughout our infrastructure.
• Establish scalable vulnerability management workflows and automation to continuously identify, prioritize, and resolve infrastructure-related risks, thus reducing the attack surface.

Required Qualifications

• Proven experience in leading and managing high-performing engineering teams within complex international environments.
• Expertise in cloud security architectures, particularly with AWS and GCP, encompassing identity management, network segmentation, and resource fortification.
• Strong proficiency with infrastructure-as-code tools like Terraform or CloudFormation to automate and enforce security policies.
• Experience implementing modern preventive security controls using tools such as OPA, Gatekeeper, or Kyverno to automate production environment guardrails.
• Capability to assess technical vulnerabilities in terms of business risk and effectively prioritize mitigation actions.
• Adeptness in collaborating with SRE, DevOps, and Platform Engineering teams to co-create security solutions that support developer agility.
• Background in designing vulnerability governance programs using automation to manage patching and configuration drift at scale.

Desirable Skills

• Experience managing security across extensive multi-account cloud environments involving AWS and GCP.
• Familiarity with security compliance standards like SOC2, ISO 27001, or PCI DSS and their technical implementation.
• Advanced certifications such as AWS Security Specialty, Google Professional Cloud Security Engineer, or CISSP.

Additional Information and Benefits

• Enjoy a hybrid work model with two days per week in our beautiful Berlin campus to facilitate face-to-face connections and teamwork.
• Benefit from 27 days of annual leave, with an additional day granted in the second and third years of service.
• Receive support for your professional development including a €1,000 education budget, language courses, parental support, and access to Udemy Business online courses.
• Enhance wellbeing through health checkups, meditation programs, and gym access.
• Financial benefits include employee share purchase schemes, sabbatical arrangements, public transport discounts, life and accident insurance, and corporate pension plans.
• Enjoy various dining benefits such as digital meal vouchers, food discounts, and corporate offers.
• Support for relocation to Berlin with access to resources and information to ease your move.
• We embrace diversity and inclusion ensuring a respectful and accommodating recruitment and working environment, including support for persons with disabilities and options for sharing pronouns.