Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Engineer II - (Product Security) role.
Rezi rewrites your resume against Delivery Hero's job description. Free.
Tailor your resume to this Security Engineer II - (Product Security) role.
Rezi rewrites your resume against Delivery Hero's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer II - (Product Security) posting at Delivery Hero — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer II - (Product Security) posting at Delivery Hero — free, in seconds.
About the Role
As a Security Engineer II, you will work alongside senior engineers and product teams to build security into our web, mobile, and backend applications from the start. You will test, triage, and fix real vulnerabilities, and automate the checks that catch them early, helping to keep a platform used across around 65 countries safe.
Responsibilities
- Test and remediate security assessments and code reviews, and help product teams fix application-layer vulnerabilities across web and mobile apps.
- Triage and track Bug Bounty and Vulnerability Disclosure Programs, validating and reproducing reports, routing them to the right teams, and tracking fixes against MTTR and SLA adherence.
- Implement and maintain automated security testing (SAST, DAST, SCA) in CI/CD pipelines.
- Partner with senior security engineers to run threat modeling sessions and architecture reviews for new features and microservices.
- Support team initiatives that use AI-driven tools to speed up vulnerability triage, code analysis, and daily security workflows.
- Guide software engineers on secure coding standards, best practices, and secure library use.
Requirements
- Solid knowledge of web and mobile application security principles, common vulnerability types (OWASP Top 10), and basic web/API security architectures.
- Ability to read and understand code in at least one modern language (e.g. Java, Python, Go or TypeScript) to help find and fix security flaws.
- Experience reproducing vulnerabilities (e.g. XSS, SQLi, IDOR, authentication bypasses) using tools like Burp Suite or OWASP ZAP.
- Basic understanding of CI/CD systems (e.g. GitHub Actions, GitLab CI), of how SAST/SCA scanners fit into developer workflows, and of cloud (AWS, GCP or Azure) and container (Docker, Kubernetes) concepts.
- Eagerness to use AI-driven tools (such as LLM coding assistants) to automate security scripts, triage and analysis.
- Collaborative, empathetic communication that helps engineers solve security issues without slowing them down.
- Experience in Bug Bounty programs (as a reporter or triager) or CTF competitions.
- Familiarity with authentication/authorization standards like OAuth 2.0, OIDC or SAML.
- Foundational security certifications (e.g. Security+, eJPT or GWAPT).
Skills
- Web application security
- Mobile application security
- OWASP Top 10
- API security
- Java
- Python
- Go
- TypeScript
- Burp Suite
- OWASP ZAP
- CI/CD
- SAST
- DAST
- SCA
- AWS
- GCP
- Azure
- Docker
- Kubernetes
- AI-driven tools
- LLM coding assistants
- Secure coding standards
- Bug Bounty programs
- CTF competitions
- OAuth 2.0
- OIDC
- SAML
Location
- Berlin, Germany
Work Type
- Hybrid
Experience Level
- II
Education Level
- Foundational security certifications (e.g. Security+, eJPT or GWAPT)
Benefits
- 27 days holiday with an extra day on 2nd and 3rd year of service
- 1.000 € Educational Budget
- Language Courses
- Parental Support
- Access to the Udemy Business platform
- Health Checkups
- Meditation & Gym
- Employee Share Purchase Plan
- Sabbatical Bank
- Public Transportation Ticket Discount
- Life & Accident Insurance
- Corporate Pension Plan
- Digital Meal Vouchers
- Food Vouchers
- Support with relocating to Berlin
About the Company
- As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door.
- We operate in around 65 countries worldwide, powered by tech, designed by people.
- As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.
- We push hard, learn quickly and stay human along the way.
- It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side.
- If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in.
Equal Opportunity
- We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience.
- Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.
- We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience—just let us know with an email to our Inclusion Officer at [email protected].
- You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.