Security Engineer II (Product Security)

Big systems. Exciting challenges. Real impact. As a Security Engineer II youll work alongside senior engineers and product teams to build security into our web mobile and backend applications from the start. Youll test triage and fix real vulnerabilities and automate the checks that catch them early. That helps keep a platform used across around 65 countries safe.

Join the team that protects Delivery Heros ecosystem customer trust and global the Security Team youll tackle high-impact challenges across cyber defense application security cloud governance and risk mitigation. Your work will directly safeguard millions of users and vendors worldwide ensuring our technology scales securely and complies with global standards as we deliver amazing experiences every day.

As a member of the Security Team youll support Delivery Heros rapid innovation and growth. Youll work on foundational systems that enable faster feature development security and reliability across our global engineering community. Every enhancement you make will contribute to our teams ability to build scale and deliver quality featuresultimately impacting millions of users worldwide.

• Test and remediate: Run security assessments and code reviews and help product teams fix application-layer vulnerabilities (such as the OWASP Top 10) across our web and mobile apps.
• Triage and track: Help run our Bug Bounty and Vulnerability Disclosure Programs. Triage validate and reproduce reports route them to the right teams and track fixes against MTTR and SLA adherence.
• Automate in CI/CD: Help implement and maintain automated security testing (SAST DAST SCA) in our pipelines so vulnerabilities are caught early.
• Threat model: Partner with senior security engineers to run threat modeling sessions and architecture reviews for new features and microservices using frameworks like STRIDE.
• Use AI and automation: Support team initiatives that use AI-driven tools to speed up vulnerability triage code analysis and daily security workflows.
• Enable developers: Guide software engineers on secure coding standards best practices and secure library use.

Qualifications :

What you need to be successful

• Solid knowledge of web and mobile application security principles common vulnerability types (OWASP Top 10) and basic web/API security architectures.
• Ability to read and understand code in at least one modern language (e.g. Java Python Go or TypeScript) to help find and fix security flaws.
• Experience reproducing vulnerabilities (e.g. XSS SQLi IDOR authentication bypasses) using tools like Burp Suite or OWASP ZAP.
• Basic understanding of CI/CD systems (e.g. GitHub Actions GitLab CI) of how SAST/SCA scanners fit into developer workflows and of cloud (AWS GCP or Azure) and container (Docker Kubernetes) concepts.
• Eagerness to use AI-driven tools (such as LLM coding assistants) to automate security scripts triage and analysis.
• Collaborative empathetic communication that helps engineers solve security issues without slowing them down.

Nice to have

• Experience in Bug Bounty programs (as a reporter or triager) or CTF competitions.
• Familiarity with authentication/authorization standards like OAuth 2.0 OIDC or SAML.
• Foundational security certifications (e.g. Security eJPT or GWAPT).

Additional Information :

Ensuring you and all our Heroes are looked after happy and healthy is always on the menu. Because if youre in good shape then were in good shape.

• Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week

• We offer 27 days holiday with an extra day on 2nd and 3rd year of service

• We will support you in developing yourself and your career growth opportunities: 1.000 Educational Budget Language Courses Parental Support and access to the Udemy Business platform to explore a variety of online courses.

• Get moving and release those wonderful mind-boosting endorphins: Health Checkups Meditation & Gym. 

• Cash. Dough. Cheddar. Whatever you call it well help you with it: Employee Share Purchase Plan Sabbatical Bank  Public Transportation Ticket Discount Life & Accident Insurance Corporate Pension Plan

• The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers and Food Vouchers. 

• Wondering what relocating to Berlin is like In this article weve put together 10 things you should know about moving to Berlin  and how Delivery Hero can support you. You can also visit our relocation hub and check out more information about moving to Berlin.

• Ready to prepare for your interview Check out the list of the 5 most common interview questions and answers created in collaboration with our recruiters.

Heads up: exact benefits may look a little different for intern working student fixed-term and part-time roles.

Ready to join our team If youre excited to grow collaborate and be part of the worlds leading delivery platform wed love to hear from you. Apply today!

We believe diversity and inclusion are key to creating not only an exciting product but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities religious beliefs color national origin gender identities or expressions sexual orientations age marital or disability statuses or any other aspect that makes you you.

We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experiencejust let us know with an email to our Inclusion Officer at .

Youre welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.

Remote Work :

No

Employment Type :

Full-time