About the company
As the world's pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe's largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.
Responsibilities
- Conduct security assessments, review code, and assist product teams in remediating application-layer vulnerabilities (such as the OWASP Top 10) across web and mobile apps.
- Help manage Bug Bounty and Vulnerability Disclosure Programs, systematically triaging, validating, and reproducing reported flaws.
- Assist in implementing and maintaining automated security testing tools (SAST, DAST, SCA) within CI/CD pipelines.
- Partner with senior security engineers to facilitate threat modeling sessions and architectural reviews using frameworks like STRIDE.
- Support team initiatives in leveraging modern security automation and AI-driven tools.
- Help track remediation progress against key metrics like Mean Time to Remediate (MTTR) and SLA Adherence %.
- Serve as a helpful partner for software engineers, providing guidance on secure coding standards and secure library usage.
Requirements
- Solid foundational knowledge of web and mobile application security principles, common vulnerability types (OWASP Top 10), and basic web/API security architectures.
- Ability to read and understand code in at least one modern programming language (e.g., Java, Python, Go, or TypeScript).
- Experience reproducing application vulnerabilities (e.g., XSS, SQLi, IDOR, authentication bypasses) and using tools like Burp Suite or OWASP ZAP.
- Basic understanding of modern CI/CD systems (e.g., GitHub Actions, GitLab CI) and how automated security scanners (SAST/SCA) integrate into developer workflows.
- Exposure to basic cloud computing principles (AWS, GCP, or Azure) and container concepts (Docker, Kubernetes).
- Eagerness to learn and utilize AI-driven tools (such as LLM coding assistants) to automate security scripts and triage tasks.
- Strong collaborative skills.