Senior Security Engineer

Google Chrome Microsoft Edge Apple Safari Mozilla Firefox Senior Security EngineerFull-timeCompany Descriptionefood is part of the Delivery Hero Group, the world’s pioneering local delivery platform, our mission is to deliver an amazing experience—fast, easy, and to your door. We operate in around 65 countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.Job DescriptionWe are in the unique position to experience new and interesting situations that many companies have never seen before. We bake challenges by using agile methodologies, top line tools and of course always working with the best of teams.This is a chance to be part of a rapidly growing team in a company that is changing the online delivery landscape, and be able to influence, execute and see the impact of your work at the end of the day.   You’ll join our Security team, working closely with product, infrastructure, and engineering teammates to bake security into the core of our platform. As a Senior Security Engineer, you’ll collaborate closely with developers and system architects to address complex security challenges and drive tech OKRs. You’ll work alongside Backend, Mobile, and DevOps counterparts to ensure a seamless, high-quality, and resilient experience across all platforms. If you’re ready to protect and shape the future of our product, we’d love to hear from you! What you’ll do: As a skilled Security Engineer, you will analyze software designs, implementations and the infrastructure to identify security issues and design countermeasuresConduct security-centric code reviews of new and legacy applications and services to identify security vulnerabilitiesEngineer and implement automated security controls and reusable libraries to make the secure path the easy path for developers.Drive security architecture assessments and perform threat modeling to ensure resilient protection of new application and cloud service deployments.Own the vulnerability management process, from triaging bug bounty submissions to driving remediation efforts with engineering teams.Propose viable, informed solutions to fix security problems and drive themScale and enhance SSDLC and bug bounty programs to align with the needs of a rapidly growing engineering organization. Life @efood: At efood, we constantly have chances to raise the bar, improving, innovating, and challenging ourselves to grow! ️ We take ownership of what we do, embracing challenges, and making things happen! ✔️ We move with pace to deliver value fast, which keeps us ahead, always balancing speed with quality! We stay humble ❤️ as we grow and dive deep in situations, asking questions & exploring beyond the surface to get the best solutions! We bring good vibes by lifting each other up, focusing on what’s possible, and being the kind of teammate everyone wants on their side! We’re a fast-growing, dynamic team where every efooder has the opportunity to shine, grow, and be part of something exciting. Hungry enough to join us?QualificationsAt least 4 years of experience in the information security fieldYou have a deep understanding of web and API security principles (OWASP Top 10) and have experience securing distributed systemsStrong understanding of network and application security, cryptographic primitives and authentication mechanismsYou have extensive experience securing modern AWS architectures and developing secure infrastructure-as-codeYou are proficient in code review and development in languages like Go, JavaScript, and Python.You are an expert in leading threat modeling sessions and providing actionable guidance to engineering teams.You have experience with integrating and automating security measures into development and CI/CD processes and you can support our infrastructure team to provide a secure environmentStrong analytical skills and a strong sense of urgency and...