Arbeitguru
VERIFIED ENGLISH WORKPLACE

Security Engineer, Product Security team

Delivery Hero SE • 10117 Berlin, Germany
100% English First
Apply Directly to Employer → Calculate Net Pay After Tax
  • Company Description**

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in.

  • Job Description**

We are on the lookout for a **Security Engineer ll **to join our **Product Security team**.** ** In this role, you will work directly alongside senior engineers and product development teams to ensure our web, mobile, and backend applications are built securely from the ground up. You will champion a "Secure by Design" approach, helping us shift security left into the early stages of the development lifecycle. From assisting with application threat models and triaging vulnerability reports to configuring CI/CD security tooling and helping developers write secure code, you will play a key operational role in keeping our global delivery platform safe

  • Application Security Testing & Remediation:** Conduct security assessments, review code, and assist product teams in remediating application-layer vulnerabilities (such as the OWASP Top 10) across our web and mobile apps.
  • Bug Bounty & Vulnerability Triage:** Help manage our **Bug Bounty and Vulnerability Disclosure Programs**, systematically triaging, validating, and reproducing reported flaws before routing them to the right engineering teams.
  • DevSecOps Integration:** Assist in implementing and maintaining automated security testing tools (SAST, DAST, SCA) directly within our CI/CD pipelines to catch vulnerabilities automatically.
  • Participate in Threat Modeling:** Partner with senior security engineers to facilitate threat modeling sessions and architectural reviews for new features and microservices using frameworks like STRIDE.
  • Support AI & Security Automation:** Support team initiatives in leveraging modern security automation and AI-driven tools to…