Security Engineer II - (Product Security)
Delivery Hero15 hours ago
Berlin, GermanyMid Level
Responsibilities
- Run security assessments and code reviews and help product teams remediate application-layer vulnerabilities across web and mobile applications.
- Triage, validate, reproduce, route, and track Bug Bounty and Vulnerability Disclosure Program reports against MTTR and SLA targets.
- Implement and maintain automated SAST, DAST, and SCA security testing in development pipelines.
- Participate in threat modeling sessions and architecture reviews for new features and microservices using frameworks such as STRIDE.
- Use AI-driven tools and automation for vulnerability triage, code analysis, and security workflows.
- Guide software engineers on secure coding standards, best practices, and secure library usage.
Requirements
- Knowledge of web and mobile application security principles, OWASP Top 10 vulnerabilities, and basic web/API security architectures.
- Ability to read and understand code in at least one of Java, Python, Go, or TypeScript.
- Experience reproducing vulnerabilities such as XSS, SQLi, IDOR, and authentication bypasses using tools such as Burp Suite or OWASP ZAP.
- Understanding of CI/CD systems, SAST and SCA scanners, cloud services such as AWS, GCP, or Azure, and containers such as Docker and Kubernetes.
- Willingness to use AI-driven tools such as LLM coding assistants for security automation, triage, and analysis.
- Collaborative communication skills for helping engineers resolve security issues.
- Preferred: Bug Bounty or Vulnerability Disclosure Program experience, CTF participation, familiarity with OAuth 2.0, OIDC, or SAML, and certifications such as Security+, eJPT, or GWAPT.
Benefits
- Hybrid working model with two days per week at the Berlin campus.
- 27 days of holiday, with an additional day in the second and third years of service.
- €1,000 educational budget, language courses, parental support, and Udemy Business access.
- Health checkups, meditation, and gym benefits.
- Employee Share Purchase Plan, Sabbatical Bank, public transportation ticket discount, life and accident insurance, and corporate pension plan.
- Digital meal vouchers and food vouchers.
- Relocation support for moving to Berlin.
Tech Stack
Categories
About Delivery Hero
Delivery Hero builds a marketplace and logistics platform for online food delivery, groceries, and local commerce, serving consumers, restaurants, and retailers through regional brands. It monetizes via commissions, delivery and service fees, and advertising, and also runs quick‑commerce operations. Founded in 2011 and headquartered in Berlin, the company operates in around 65 countries and has been listed on the Frankfurt Stock Exchange since 2017.