Security Engineer II - (Product Security)
Delivery Hero3 days ago
Berlin, GermanyMid Level
Responsibilities
- Run security assessments and code reviews for web and mobile applications and help remediate application-layer vulnerabilities.
- Triage, validate, reproduce, route, and track Bug Bounty and Vulnerability Disclosure Program reports against MTTR and SLA targets.
- Implement and maintain automated SAST, DAST, and SCA security testing in CI/CD pipelines.
- Participate in threat-modeling sessions and architecture reviews for new features and microservices using STRIDE.
- Use AI-driven tools to support vulnerability triage, code analysis, and security automation.
- Advise software engineers on secure coding standards, best practices, and secure library use.
Requirements
- Solid knowledge of web and mobile application security, OWASP Top 10 vulnerabilities, and web/API security architectures.
- Ability to read and understand at least one of Java, Python, Go, or TypeScript.
- Experience reproducing vulnerabilities such as XSS, SQL injection, IDOR, and authentication bypasses using Burp Suite or OWASP ZAP.
- Basic understanding of CI/CD systems, SAST and SCA scanners, cloud platforms, and container concepts.
- Willingness to use AI-driven tools such as LLM coding assistants for security automation, triage, and analysis.
- Collaborative communication skills for helping engineers resolve security issues.
- Preferred: Bug Bounty or CTF experience, familiarity with OAuth 2.0, OIDC, or SAML, and certifications such as Security+, eJPT, or GWAPT.
Benefits
- Hybrid work with face-to-face collaboration at the Berlin campus 2 days per week.
- 27 days of annual holiday, increasing with additional service years.
- €1,000 educational budget, language courses, parental support, and Udemy Business access.
- Health checkups, meditation, and gym benefits.
- Employee Share Purchase Plan, sabbatical bank, public transportation ticket discount, life and accident insurance, and corporate pension plan.
- Digital meal and food vouchers, plus relocation support for moving to Berlin.
Tech Stack
Categories
About Delivery Hero
Delivery Hero builds a marketplace and logistics platform for online food delivery, groceries, and local commerce, serving consumers, restaurants, and retailers through regional brands. It monetizes via commissions, delivery and service fees, and advertising, and also runs quick‑commerce operations. Founded in 2011 and headquartered in Berlin, the company operates in around 65 countries and has been listed on the Frankfurt Stock Exchange since 2017.