Security Engineer, Product Security team

About the Position

Security Engineer, Product Security Team

As a Security Engineer II on our Product Security team, you'll play a crucial role in safeguarding our global platform from web and mobile application vulnerabilities. Join our team in Berlin, Germany, or work remotely to help us build a secure and reliable service used by millions worldwide.

Responsibilities

• Test and Remediate: Conduct security assessments and code reviews to identify and fix application-layer vulnerabilities (such as the OWASP Top 10) across our web and mobile apps.
• Triage and Track: Manage our Bug Bounty and Vulnerability Disclosure Programs. Triage, validate, and reproduce reports, route them to the right teams, and track fixes against MTTR and SLA adherence.
• Automate in CI/CD: Implement and maintain automated security testing (SAST, DAST, SCA) in our pipelines to catch vulnerabilities early.
• Threat Model: Collaborate with senior security engineers to run threat modeling sessions and architecture reviews for new features and microservices using frameworks like STRIDE.
• Use AI and Automation: Support team initiatives that leverage AI-driven tools to speed up vulnerability triage, code analysis, and daily security workflows.
• Enable Developers: Guide software engineers on secure coding standards, best practices, and secure library use.

Requirements

• Solid knowledge of web and mobile application security principles, common vulnerability types (OWASP Top 10), and basic web/API security architectures.
• Ability to read and understand code in at least one modern language (e.g., Java, Python, Go, or TypeScript) to help find and fix security flaws.
• Experience reproducing vulnerabilities (e.g., XSS, SQLi, IDOR, authentication bypasses) using tools like Burp Suite or OWASP ZAP.
• Basic understanding of CI/CD systems (e.g., GitHub Actions, GitLab CI), how SAST/SCA scanners fit into developer workflows, and cloud (AWS, GCP, or Azure) and container (Docker, Kubernetes) concepts.
• Eagerness to use AI-driven tools (such as LLM coding assistants) to automate security scripts, triage, and analysis.
• Collaborative, empathetic communication that helps engineers solve security issues without slowing them down.

Nice to Have

• Experience in Bug Bounty programs (as a reporter or triager) or CTF competitions.
• Familiarity with authentication/authorization standards like OAuth 2.0, OIDC, or SAML.
• Foundational security certifications (e.g., Security+, eJPT, or GWAPT).

We Offer

• Hybrid Working Model: Join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week.
• 27 Days Holiday: Plus an extra day on the 2nd and 3rd year of service.
• Career Development: 1,000 € Educational Budget, Language Courses, Parental Support, and access to the Udemy Business platform.
• Health and Wellness: Health Checkups, Meditation & Gym.
• Financial Benefits: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan.
• Meal Vouchers: Digital Meal Vouchers and Food Vouchers.
• Relocation Support: Information and support for relocating to Berlin.

About the Company

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly, and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative, and ready to dive deep into meaningful work, you’ll fit right in.

Ready to join our team? If you’re excited to grow, collaborate, and be part of the world’s leading delivery platform, we’d love to hear from you. Apply today!

We believe diversity and inclusion are key to creating not only an exciting product but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.

We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience-just let us know with an email to our Inclusion Officer at email protected.

You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.

I'm interested

Privacy Notice | Imprint

I'm interested | Refer a friend

Share this job