Security Engineer, Product Security team
Core
Build security into web, mobile, and backend applications by testing, triaging vulnerabilities, and automating security checks in CI/CD pipelines.
Role type
Mid-level IC security engineer (product security)
Builds
Secure web/mobile applications and CI/CD pipelines for a global delivery platform
Domain
Fintech/Logistics (Delivery Hero) + Application Security
Required skills
Web/mobile application security principles, OWASP Top 10, code review in modern languages (Java/Python/Go/TypeScript), vulnerability reproduction (XSS/SQLi/IDOR), CI/CD automation (SAST/DAST/SCA), cloud/container concepts (AWS/GCP/Azure/Docker/Kubernetes), threat modeling (STRIDE), AI-driven security tools
Preferred skills
Bug Bounty program experience, CTF competitions, OAuth 2.0/OIDC/SAML standards, security certifications (Security+/eJPT/GWAPT)
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, GitLab CI, AWS, GCP, Azure, Docker, Kubernetes, LLM coding assistants
Responsibilities
Run security assessments and code reviews to fix application-layer vulnerabilities; Triage and validate Bug Bounty/Vulnerability Disclosure reports; Implement and maintain automated security testing in CI/CD pipelines; Partner on threat modeling and architecture reviews; Guide engineers on secure coding standards
Seniority
Mid-level, hands-on IC
