Security Engineer, Product Security team
Delivery Hero23 hours ago
Berlin, GermanyMid Level
Responsibilities
- Conduct application security assessments, code reviews, and remediation support for web and mobile applications.
- Triage, validate, reproduce, and route vulnerabilities reported through bug bounty and vulnerability disclosure programs.
- Implement and maintain SAST, DAST, and SCA security tooling in CI/CD pipelines.
- Participate in threat modeling and architectural reviews for features and microservices using STRIDE.
- Support AI-driven security automation for vulnerability triage, code analysis, and security workflows.
- Track vulnerability remediation against MTTR and SLA adherence metrics.
- Advise software engineers on secure coding standards, best practices, and secure library usage.
Requirements
- Foundational knowledge of web and mobile application security, OWASP Top 10 vulnerabilities, and web/API security architectures.
- Ability to read and understand code in at least one of Java, Python, Go, or TypeScript.
- Experience reproducing application vulnerabilities such as XSS, SQLi, IDOR, and authentication bypasses using tools such as Burp Suite or OWASP ZAP.
- Basic understanding of CI/CD systems and automated security scanner integration.
- Exposure to cloud computing principles and container concepts including Docker and Kubernetes.
- Interest in using AI-driven tools to automate security scripts, triage, and analysis.
- Strong collaboration and communication skills when partnering with software engineers.
- Experience with bug bounty programs or CTF competitions is preferred.
- Familiarity with OAuth 2.0, OIDC, or SAML is preferred.
- Security certifications such as Security+, eJPT, or GWAPT are preferred.
Benefits
- Hybrid working model with face-to-face collaboration at the Berlin campus two days per week.
- 27 days of holiday, with an additional day in the second and third years of service.
- €1,000 educational budget, language courses, parental support, and access to Udemy Business.
- Health checkups, meditation, and gym benefits.
- Employee Share Purchase Plan, Sabbatical Bank, public transportation ticket discount, life and accident insurance, and corporate pension plan.
- Digital meal vouchers and food vouchers.
- Relocation support for moving to Berlin.
Tech Stack
Categories
About Delivery Hero
Delivery Hero builds a marketplace and logistics platform for online food delivery, groceries, and local commerce, serving consumers, restaurants, and retailers through regional brands. It monetizes via commissions, delivery and service fees, and advertising, and also runs quick‑commerce operations. Founded in 2011 and headquartered in Berlin, the company operates in around 65 countries and has been listed on the Frankfurt Stock Exchange since 2017.