Security Engineer II - (Product Security)
Core
Build security into web, mobile, and backend applications by testing, triaging vulnerabilities, and automating security checks in CI/CD pipelines.
Role type
mid-level IC application security engineer
Builds
secure web/mobile apps and cloud infrastructure for Delivery Hero's global delivery platform
Domain
food delivery / e-commerce / application security
Required skills
web and mobile application security principles, OWASP Top 10, code reading (Java/Python/Go/TypeScript), vulnerability reproduction (XSS/SQLi/IDOR), CI/CD integration (SAST/DAST/SCA), cloud platforms (AWS/GCP/Azure), containerization (Docker/Kubernetes), threat modeling (STRIDE), AI-driven security tools
Preferred skills
Bug Bounty program experience, CTF competitions, authentication standards (OAuth 2.0/OIDC/SAML), security certifications (Security+/eJPT/GWAPT)
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, GitLab CI, AWS, GCP, Azure, Docker, Kubernetes, STRIDE
Responsibilities
Run security assessments and code reviews to fix application-layer vulnerabilities; Triage and validate reports from Bug Bounty and Vulnerability Disclosure Programs; Implement and maintain automated security testing in CI/CD pipelines; Partner on threat modeling sessions and architecture reviews; Guide software engineers on secure coding standards and best practices
Seniority
Mid-level, hands-on IC
