Security Engineer, Product Security team
Delivery Hero16 hours ago
Berlin, GermanyMid Level
Responsibilities
- Run security assessments and code reviews and help product teams remediate application-layer vulnerabilities across web and mobile applications.
- Triage, validate, reproduce, route, and track vulnerability reports from Bug Bounty and Vulnerability Disclosure Programs against MTTR and SLA targets.
- Implement and maintain automated SAST, DAST, and SCA security testing in CI/CD pipelines.
- Participate in threat modeling sessions and architecture reviews for new features and microservices using frameworks such as STRIDE.
- Use AI-driven tools and automation to accelerate vulnerability triage, code analysis, and security workflows.
- Guide software engineers on secure coding standards, security best practices, and secure library usage.
Requirements
- Solid knowledge of web and mobile application security, common vulnerability types including the OWASP Top 10, and basic web/API security architectures.
- Ability to read and understand code in at least one modern language such as Java, Python, Go, or TypeScript.
- Experience reproducing vulnerabilities such as XSS, SQL injection, IDOR, and authentication bypasses using tools such as Burp Suite or OWASP ZAP.
- Basic understanding of CI/CD systems, SAST and SCA scanners, cloud platforms, and container concepts.
- Eagerness to use AI-driven tools such as LLM coding assistants for security scripting, triage, and analysis.
- Collaborative and empathetic communication skills for helping engineers resolve security issues.
- Preferred: experience with Bug Bounty programs or CTF competitions.
- Preferred: familiarity with OAuth 2.0, OIDC, or SAML.
- Preferred: foundational security certification such as Security+, eJPT, or GWAPT.
Benefits
- Hybrid working model with two days per week of face-to-face collaboration at the Berlin campus.
- 27 days of holiday, plus an additional day in the second and third years of service.
- €1,000 educational budget, language courses, parental support, and access to Udemy Business.
- Health checkups, meditation, and gym benefits.
- Employee Share Purchase Plan, Sabbatical Bank, public transportation ticket discount, life and accident insurance, and corporate pension plan.
- Digital meal vouchers and food vouchers.
- Relocation support for moving to Berlin.
Tech Stack
Categories
About Delivery Hero
Delivery Hero builds a marketplace and logistics platform for online food delivery, groceries, and local commerce, serving consumers, restaurants, and retailers through regional brands. It monetizes via commissions, delivery and service fees, and advertising, and also runs quick‑commerce operations. Founded in 2011 and headquartered in Berlin, the company operates in around 65 countries and has been listed on the Frankfurt Stock Exchange since 2017.