[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Delivery Hero jobs](https://jobs.opennash.com/companies/delivery-hero/) · [Search jobs](/search/) Delivery Hero · Berlin, Germany # Security Engineer, Product Security team Berlin, Germany Full-time Security Listed on Delivery Hero’s official careers site. Posted October 13, 2026. Check that it is still open and apply there. [Apply on Delivery Hero’s careers site →](https://jobs.smartrecruiters.com/DeliveryHero/744000155298676-security-engineer-product-security-team) [OpenNash Jobs](https://jobs.opennash.com/) / [Delivery Hero](https://jobs.opennash.com/companies/delivery-hero/) / Security Engineer, Product Security team ## Job description We are on the lookout for a Security Engineer ll to join our Product Security team. In this role, you will work directly alongside senior engineers and product development teams to ensure our web, mobile, and backend applications are built securely from the ground up. You will champion a "Secure by Design" approach, helping us shift security left into the early stages of the development lifecycle. From assisting with application threat models and triaging vulnerability reports to configuring CI/CD security tooling and helping developers write secure code, you will play a key operational role in keeping our global delivery platform safe Application Security Testing & Remediation: Conduct security assessments, review code, and assist product teams in remediating application-layer vulnerabilities (such as the OWASP Top 10) across our web and mobile apps. ### Bug Bounty & Vulnerability Triage Help manage our Bug Bounty and Vulnerability Disclosure Programs, systematically triaging, validating, and reproducing reported flaws before routing them to the right engineering teams. ### DevSecOps Integration Assist in implementing and maintaining automated security testing tools (SAST, DAST, SCA) directly within our CI/CD pipelines to catch vulnerabilities automatically. ### Participate in Threat Modeling Partner with senior security engineers to facilitate threat modeling sessions and architectural reviews for new features and microservices using frameworks like STRIDE. ### Support AI & Security Automation Support team initiatives in leveraging modern security automation and AI-driven tools to optimize vulnerability triage, code analysis, and daily security workflows. ### Track Vulnerability SLAs Help track remediation progress against key metrics like Mean Time to Remediate (MTTR) and SLA Adherence %, working directly with developers to ensure timely fixes. ### Developer Enablement Serve as a helpful partner for software engineers, providing guidance on secure coding standards, best practices, and secure library usage. ## Qualifications ### What you need to be successful Application Security Fundamentals: Solid foundational knowledge of web and mobile application security principles, common vulnerability types (OWASP Top 10), and basic web/API security architectures. ### Hands-On Coding Ability Ability to read and understand code in at least one modern programming language (e.g., Java, Python, Go, or TypeScript) to help identify and fix security flaws. ### Vulnerability Triage & Validation Experience reproducing application vulnerabilities (e.g., XSS, SQLi, IDOR, authentication bypasses) and using tools like Burp Suite or OWASP ZAP. ### DevSecOps & CI/CD Awareness Basic understanding of modern CI/CD systems (e.g., GitHub Actions, GitLab CI) and how automated security scanners (SAST/SCA) integrate into developer workflows. ### Cloud & Container Baselines Exposure to basic cloud computing principles (AWS, GCP, or Azure) and container concepts ( Docker, Kubernetes). ### AI & Automation Curiosity Eagerness to learn and utilize AI-driven tools (such as LLM coding assistants) to automate security scripts, triage tasks, and security analysis. ### Pragmatic Communication Strong collaborative skills and an empathetic approach to partnering with software engineers to solve security issues without slowing them down. ### Nice to have Experience participating in Bug Bounty programs (as a reporter or triager) or CTF (Capture The Flag) competitions. Familiarity with authentication/authorization standards like OAuth 2.0, OIDC, or SAML. Industry certifications focusing on foundational security skills (e.g., Security+, eJPT, or GWAPT). ### Who We Are As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in. ## At a glance - Posted by the employer: Oct 13, 2026 - First seen by OpenNash: Oct 19, 2026 - Last checked: Oct 19, 2026 - Listed for: 6 days - Location: Berlin, Germany - Employment type: Full-time[Apply on Delivery Hero’s careers site →](https://jobs.smartrecruiters.com/DeliveryHero/744000155298676-security-engineer-product-security-team) ## More jobs at Delivery Hero ### [Director, Security Operations (Security Engineering)](https://jobs.opennash.com/companies/delivery-hero/jobs/64822f22dba4ad5a51e0/) Berlin, Germany ### [Senior Specialist, Workday Security & Governance (People Systems)](https://jobs.opennash.com/companies/delivery-hero/jobs/bcd6193fb8900f710829/) Berlin, Germany ### [Associate, People Operations (6 month contract)](https://jobs.opennash.com/companies/delivery-hero/jobs/c9b0ce9487a3b02870c5/) Berlin, Germany ### [Compliance Manager](https://jobs.opennash.com/companies/delivery-hero/jobs/636f972b8f54f9d62629/) Berlin, Germany ### [Director of B2B Marketing, Retail Media - Vendor](https://jobs.opennash.com/companies/delivery-hero/jobs/bd09ec0d5d5620914396/) Berlin, Germany ## Similar jobs at other companies ### [Senior Security Engineer - Product Security](https://jobs.opennash.com/companies/ecolab/jobs/b8df598509f8b3df537f/) Ecolab · Bangalore, Karnātaka, India ### [Product Security Engineer, Senior - Cork, Ireland](https://jobs.opennash.com/companies/qualcomm/jobs/62b5520c759382ed5824/) Qualcomm · Cork, Ireland ### [Product Security Engineer - Hardware/Firmware](https://jobs.opennash.com/companies/sandisk/jobs/9708c1a3c70564e1732c/) Sandisk ### [Senior Product Security Engineer](https://jobs.opennash.com/companies/general-dynamics/jobs/71853950191f7701ff7c/) General Dynamics · Hastings, Other / Non-US, UK OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)