Staff Security Engineer, Product Security team

Delivery Hero
Berlin
Workplace: HybridFull timeFunction: CybersecuritySkills: ["Leadership","Stakeholder management","Mentoring","Risk prioritization","Collaboration"]

Drive Product Security’s technical strategy as a Staff Product Security Engineer, scaling “Secure by Design” across Delivery Hero’s web and mobile ecosystem. Lead threat modeling and security architecture reviews, architect vulnerability management and governance, and embed DevSecOps security testing into CI/CD pipelines. Bridge application, AI/ML, infrastructure security, and security operations—while using AI/LLMs for automated vulnerability triage and remediation. Mentor engineers and define security metrics to improve MTTR and SLA adherence.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Delivery Hero
Delivery Hero
2 months ago

Staff Security Engineer, Product Security team

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Drive Product Security’s technical strategy as a Staff Product Security Engineer, scaling “Secure by Design” across Delivery Hero’s web and mobile ecosystem. Lead threat modeling and security architecture reviews, architect vulnerability management and governance, and embed DevSecOps security testing into CI/CD pipelines. Bridge application, AI/ML, infrastructure security, and security operations—while using AI/LLMs for automated vulnerability triage and remediation. Mentor engineers and define security metrics to improve MTTR and SLA adherence.
Location: Berlin
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Drive the Product Security technical roadmap, scaling threat-modeling methodologies and secure coding practices across global web and mobile applications.
  • •Lead threat modeling and security architecture reviews to identify design flaws early in the SDLC and co-author secure architectural blueprints.
  • •Architect and run vulnerability management at scale by validating, ranking, and governing vulnerabilities from internal testing and external disclosure programs.
  • •Automate DevSecOps workflows by embedding SAST, DAST, and SCA into developer CI/CD pipelines to catch high-risk flaws early.
  • •Champion AI-driven security automation, including LLM-based vulnerability triage and guardrails, and collaborate across Application Security, AI/ML security, Infrastructure Security, and Security Operations.

Pay and Benefits

Perks:Learning BudgetGym MembershipEquityPension

Key Requirements

  • •Proven staff-level experience driving application security and DevSecOps initiatives in large, global software environments.
  • •Deep hands-on web and mobile security expertise, including managing external bug bounty and vulnerability disclosure programs.
  • •Strong AI security knowledge using frameworks such as OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
  • •Hands-on ability to apply AI/LLMs for security engineering workflows such as automated vulnerability analysis, triage, and code security remediation.
  • •Expertise in secure coding and vulnerability remediation using languages such as Java, Python, and Go, with strong understanding of IAM (OAuth, OIDC, SAML) and Zero Trust.
Skills:LeadershipStakeholder managementMentoringRisk prioritizationCollaboration
Languages:English
Tech Stack:Secure by DesignThreat modelingSDLCDevSecOpsCI/CDSASTDASTSCALLMsOWASP Top 10 for LLM ApplicationsMITRE ATLASNIST AI RMFGDPREU AI ActOAuthOIDCSAMLZero TrustAWSGCP

Company Brief

Delivery Hero
Global online food-ordering and local delivery platform operating multiple regional brands (e.g., Foodpanda, Glovo, Talabat) across 50–70+ countries, supplying food and quick-commerce deliveries via marketplace and logistics services.
Industry: Online Marketplaces
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Berlin, Germany
Founded: 2011
Glassdoor
Glassdoor: 3.4
WebsiteLinkedInGlassdoor