Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Security Engineer, Product Security team role.

Rezi rewrites your resume against Delivery Hero's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Security Engineer, Product Security team posting at Delivery Hero — free, in seconds.

About the Role

We are looking for a Security Engineer II to join our Product Security team. You will work directly with senior engineers and product development teams to ensure our web, mobile, and backend applications are built securely from the ground up. You will champion a "Secure by Design" approach, helping to shift security left into the early stages of the development lifecycle.

Responsibilities

Conduct security assessments, review code, and assist product teams in remediating application-layer vulnerabilities (such as the OWASP Top 10) across our web and mobile apps.
Help manage our Bug Bounty and Vulnerability Disclosure Programs, systematically triaging, validating, and reproducing reported flaws before routing them to the right engineering teams.
Assist in implementing and maintaining automated security testing tools (SAST, DAST, SCA) directly within our CI/CD pipelines to catch vulnerabilities automatically.
Partner with senior security engineers to facilitate threat modeling sessions and architectural reviews for new features and microservices using frameworks like STRIDE.
Support team initiatives in leveraging modern security automation and AI-driven tools to optimize vulnerability triage, code analysis, and daily security workflows.
Help track remediation progress against key metrics like Mean Time to Remediate (MTTR) and SLA Adherence %, working directly with developers to ensure timely fixes.
Serve as a helpful partner for software engineers, providing guidance on secure coding standards, best practices, and secure library usage.

Requirements

Solid foundational knowledge of web and mobile application security principles, common vulnerability types (OWASP Top 10), and basic web/API security architectures.
Ability to read and understand code in at least one modern programming language (e.g., Java, Python, Go, or TypeScript) to help identify and fix security flaws.
Experience reproducing application vulnerabilities (e.g., XSS, SQLi, IDOR, authentication bypasses) and using tools like Burp Suite or OWASP ZAP.
Basic understanding of modern CI/CD systems (e.g., GitHub Actions, GitLab CI) and how automated security scanners (SAST/SCA) integrate into developer workflows.
Exposure to basic cloud computing principles (AWS, GCP, or Azure) and container concepts (Docker, Kubernetes).
Eagerness to learn and utilize AI-driven tools (such as LLM coding assistants) to automate security scripts, triage tasks, and security analysis.
Strong collaborative skills and an empathetic approach to partnering with software engineers to solve security issues without slowing them down.
Experience participating in Bug Bounty programs (as a reporter or triager) or CTF (Capture The Flag) competitions.
Familiarity with authentication/authorization standards like OAuth 2.0, OIDC, or SAML.
Industry certifications focusing on foundational security skills (e.g., Security+, eJPT, or GWAPT).

Skills

Application Security Testing
Vulnerability Triage
DevSecOps
CI/CD
Threat Modeling
AI & Security Automation
Secure Coding
OWASP Top 10
Burp Suite
OWASP ZAP
GitHub Actions
GitLab CI
SAST
DAST
SCA
STRIDE
AWS
GCP
Azure
Docker
Kubernetes
LLM
OAuth 2.0
OIDC
SAML

Location

Berlin, Germany

Work Type

Hybrid

Experience Level

Mid-level

Benefits

27 days holiday with an extra day on 2nd and 3rd year of service
1.000 € Educational Budget
Language Courses
Parental Support
Udemy Business platform access
Health Checkups
Meditation & Gym
Employee Share Purchase Plan
Sabbatical Bank
Public Transportation Ticket Discount
Life & Accident Insurance
Corporate Pension Plan
Digital Meal Vouchers
Food Vouchers
Relocation support for Berlin

About the Company

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door.
We operate in around 65 countries worldwide, powered by tech, designed by people.
As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.
We push hard, learn quickly and stay human along the way.
It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side.
If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in.

Equal Opportunity

We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience.
Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience—just let us know with an email to our Inclusion Officer at [email protected].
Severely disabled applicants with equal qualifications will be given preferential consideration.
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.