{"id":3612343,"url":"https://alion.io/job/insightsoftware-security-engineer-ii-product-security","title":"Security Engineer II - (Product Security)","company":{"id":786,"name":"Insightsoftware","domain":"insightsoftware.com","url":"https://alion.io/company/insightsoftware","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":25,"ghost_share":0,"stale_share":0.92,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-11-02T14:28:19Z","employer_posted_date":null,"last_verified_at":"2026-11-02T14:28:19Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Company Description\nAs the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative and ready to dive deep into meaningful work, you’ll fit right in.\nJob Description\nBig systems. Exciting challenges. Real impact. As a Security Engineer II, you’ll work alongside senior engineers and product teams to build security into our web, mobile and backend applications from the start. You’ll test, triage and fix real vulnerabilities, and automate the checks that catch them early. That helps keep a platform used across around 65 countries safe.\nJoin the team that protects Delivery Hero’s ecosystem, customer trust, and global platforms. In the Security Team, you’ll tackle high-impact challenges across cyber defense, application security, cloud governance, and risk mitigation. Your work will directly safeguard millions of users and vendors worldwide, ensuring our technology scales securely and complies with global standards as we deliver amazing experiences every day.\nAs a member of the Security Team, you’ll support Delivery Hero’s rapid innovation and growth. You’ll work on foundational systems that enable faster feature development, security, and reliability across our global engineering community. Every enhancement you make will contribute to our teams’ ability to build, scale, and deliver quality features-ultimately impacting millions of users worldwide.\nTest and remediate: Run security assessments and code reviews, and help product teams fix application-layer vulnerabilities (such as the OWASP Top 10) across our web and mobile apps.\n\nTriage and track: Help run our Bug Bounty and Vulnerability Disclosure Programs. Triage, validate and reproduce reports, route them to the right teams, and track fixes against MTTR and SLA adherence.\n\nAutomate in CI/CD: Help implement and maintain automated security testing (SAST, DAST, SCA) in our pipelines so vulnerabilities are caught early.\n\nThreat model: Partner with senior security engineers to run threat modeling sessions and architecture reviews for new features and microservices, using frameworks like STRIDE.\n\nUse AI and automation: Support team initiatives that use AI-driven tools to speed up vulnerability triage, code analysis and daily security workflows.\n\nEnable developers: Guide software engineers on secure coding standards, best practices and secure library use.\n\nQualifications\nWhat you need to be successful\nSolid knowledge of web and mobile application security principles, common vulnerability types (OWASP Top 10) and basic web/API security architectures.\nAbility to read and understand code in at least one modern language (e.g. Java, Python, Go or TypeScript) to help find and fix security flaws.\nExperience reproducing vulnerabilities (e.g. XSS, SQLi, IDOR, authentication bypasses) using tools like Burp Suite or OWASP ZAP.\nBasic understanding of CI/CD systems (e.g. GitHub Actions, GitLab CI), of how SAST/SCA scanners fit into developer workflows, and of cloud (AWS, GCP or Azure) and container (Docker, Kubernetes) concepts.\nEagerness to use AI-driven tools (such as LLM coding assistants) to automate security scripts, triage and analysis.\nCollaborative, empathetic communication that helps engineers solve security issues without slowing them down.\nNice to have\nExperience in Bug Bounty programs (as a reporter or triager) or CTF competitions.\nFamiliarity with authentication/authorization standards like OAuth 2.0, OIDC or SAML.\nFoundational security certifications (e.g. Security+, eJPT or GWAPT).\nAdditional Information\nEnsuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you’re in good shape, then we’re in good shape.\nMake the most of ourhybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week\n\nWe offer 27 days holiday with an extra day on 2nd and 3rd year of service\n\nWe will support you in developing yourself and your career growth opportunities: 1.000 € Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.\n\nGet moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation & Gym.\n\nCash. Dough. Cheddar. Whatever you call it, we’ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan\n\nThe power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers and Food Vouchers.\n\nWondering what relocating to Berlin is like? In this article, we’ve put together10 things you should know about moving to Berlin and how Delivery Hero can support you. You can also visit ourrelocation hub and check out more information about moving to Berlin.\n\nReady to prepare for your interview? Check out the list of the5 most common interview questions and answers created in collaboration with our recruiters.\n\nHeads up: exact benefits may look a little different for intern, working student, fixed-term, and part-time roles.\nReady to join our team? If you’re excited to grow, collaborate and be part of the world’s leadingdelivery platform, we’d love to hear from you. Apply today!\nWe believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.\nWe encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience-just let us know with an email to our Inclusion Officer at\n[emailprotected]\n.\nYou're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.","description_format":"text","description_chars":6609,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Data & Analytics","Software","Embedded & Customer-Facing Analytics","Data Transformation & Orchestration"],"lifecycle":[{"event":"open","at":"2026-11-02T14:53:41Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":43,"reasons":["seen:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/insightsoftware-security-engineer-ii-product-security","json_url":"https://alion.io/job/insightsoftware-security-engineer-ii-product-security.json","meta":{"generated_at":"2026-11-03T21:31:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":795,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":786},"rest":"https://alion.io/mcp/rest/get_company?id=786"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finsightsoftware-security-engineer-ii-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finsightsoftware-security-engineer-ii-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finsightsoftware-security-engineer-ii-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/insightsoftware-security-engineer-ii-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finsightsoftware-security-engineer-ii-product-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3612343}},{"tool":"search_jobs","arguments":{"company":"insightsoftware.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3612343},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}