Security Engineer II - (Product Security)
Delivery Hero2 days ago
Berlin, GermanyMid Level
Responsibilities
- Run security assessments and code reviews for web and mobile applications.
- Help product teams remediate application-layer vulnerabilities, including OWASP Top 10 issues.
- Triage, validate, reproduce, route, and track Bug Bounty and Vulnerability Disclosure Program reports.
- Maintain automated SAST, DAST, and SCA security testing in CI/CD pipelines.
- Participate in threat modeling and architecture reviews for new features and microservices using STRIDE.
- Use AI-driven tools and automation for vulnerability triage, code analysis, and security workflows.
- Advise software engineers on secure coding standards, best practices, and secure library usage.
Requirements
- Solid knowledge of web and mobile application security, common vulnerability types, the OWASP Top 10, and basic web/API security architectures.
- Ability to read and understand Java, Python, Go, or TypeScript code to identify and fix security flaws.
- Experience reproducing vulnerabilities such as XSS, SQL injection, IDOR, and authentication bypasses using Burp Suite or OWASP ZAP.
- Basic understanding of CI/CD systems, SAST and SCA scanners, cloud platforms, and container concepts.
- Willingness to use AI-driven tools, including LLM coding assistants, for security automation and analysis.
- Collaborative communication skills for helping engineers resolve security issues.
- Experience with Bug Bounty programs or CTF competitions is preferred.
- Familiarity with OAuth 2.0, OIDC, or SAML is preferred.
- Security+, eJPT, or GWAPT certification is preferred.
Benefits
- Hybrid working model with two days per week in the Berlin campus.
- 27 days of holiday, plus an additional day in the second and third years of service.
- €1,000 educational budget, language courses, parental support, and Udemy Business access.
- Health checkups, meditation, and gym benefits.
- Employee Share Purchase Plan, Sabbatical Bank, public transportation ticket discount, life and accident insurance, and corporate pension plan.
- Digital meal vouchers and food vouchers.
- Relocation support for moving to Berlin.
Tech Stack
Categories
About Delivery Hero
Delivery Hero builds a marketplace and logistics platform for online food delivery, groceries, and local commerce, serving consumers, restaurants, and retailers through regional brands. It monetizes via commissions, delivery and service fees, and advertising, and also runs quick‑commerce operations. Founded in 2011 and headquartered in Berlin, the company operates in around 65 countries and has been listed on the Frankfurt Stock Exchange since 2017.