Senior Manager - Infrastructure Security

Job Description

We are on the lookout for a Senior Manager, Infrastructure Security. In this pivotal role, you will lead the strategy for protecting our cloud and corporate environments by reducing real-world risk without slowing down the business. You will champion a "Secure by Design" philosophy, ensuring that security is a collaborative engineering challenge where automated guardrails and technical excellence enable our platform to scale rapidly and securely by default.

As a Senior Manager, you will build and lead a mission-oriented team of engineers, fostering a culture where technical excellence, automation, and professional growth are central to our operations. You will move away from reactive auditing, instead focusing on the engineering of non-negotiable technical gates that prevent misconfiguration at the source. Your leadership will be defined by the ability to co-design the "how" with Engineering and IT, co-authoring architectural blueprints that are technically viable and operationally frictionless. By driving the transition toward Security-as-Code and consistent enforcement across 100% of our assets, you will directly influence the resilience and velocity of the world’s leading local delivery platform.

• Lead and Mentor a High-Performing Team: Champion a culture of technical excellence and professional growth, enabling the team to drive strategic infrastructure resilience and long-term career success.
• Drive Infrastructure Security Maturity: Define the strategic roadmap for our core domains to ensure maximum risk reduction and operational efficiency across our global cloud and corporate infrastructure.
• Engineering Ownership and Enablement: Partner with tech verticals to provide the tooling, visibility, and expertise required for Engineering to own their security outcomes.
• Automate Preventive Guardrails: Replace reactive manual checkpoints with automated policy-as-code and admission controls to validate or reject changes before they reach production.
• Standardize Global Security Baselines: Eliminate ad-hoc configurations by architecting unified, version controlled security standards across our entire cloud and corporate infrastructure.
• Drive Vulnerability Governance: Architect scalable processes and automation to identify, prioritize, and remediate infrastructure risks, ensuring a measurable reduction in our attack surface.

Qualifications

• Proven Engineering Leadership: You have a track record of building and leading high performing engineering teams in complex global environments.
• Cloud Security Expertise: You possess deep technical knowledge of AWS and GCP security architectures including identity boundaries, network isolation, and resource hardening.
• Security as Code Mindset: You are proficient in driving automation through Terraform, CloudFormation, or similar infrastructure as code tools to enforce security standards.
• Modern Preventive Controls: You have experience implementing admission controllers and policy engines such as OPA, Gatekeeper, or Kyverno to automate production guardrails.
• Strategic Risk Management: You can translate complex technical vulnerabilities into clear business risks and prioritize remediation efforts based on actual threat impact.
• Collaborative Influence: You are an expert at partnering with SRE, DevOps, and Platform Engineering teams to co-design security solutions that enhance rather than hinder developer velocity.
• Operational Excellence: You have experience architecting vulnerability management programs that leverage automation to handle patching and configuration drift at a massive scale.

Nice to have:

• Large Scale Cloud Operations: Experience managing security consistency across a complex, multi-account environment within both AWS and GCP.
• Security Compliance: Familiarity with implementing technical controls to meet industry standards such as SOC2, ISO 27001, or PCI DSS.
• Advanced Certifications: Professional level credentials such as the AWS Security Specialty, Google Professional Cloud Security Engineer, or CISSP.

Additional Information

Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you’re in good shape, then we’re in good shape.

• Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week

• We offer 27 days holiday with an extra day on 2nd and 3rd year of service

• We will support you in developing yourself and your career growth opportunities: 1.000 € Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.

• Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Gym

• Cash. Dough. Cheddar. Whatever you call it, we’ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan

• The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Corporate Discounts. Courses.

• Wondering what relocating to Berlin is like? In this article, we’ve put together 10 things you should know about moving to Berlin and how Delivery Hero can support you. You can also visit our relocation hub and check out more information about moving to Berlin.

• Ready to prepare for your interview? Check out the list of the 5 most common interview questions and answers created in collaboration with our recruiters.

Ready to join our team? If you’re excited to grow, collaborate and be part of the world’s leading delivery platform, we’d love to hear from you. Apply today!

We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.

We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience—just let us know with an email to our Inclusion Officer at [email protected].

Severely disabled applicants with equal qualifications will be given preferential consideration.

You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.