Staff Security Engineer

About The Opportunity

We are looking for a highly talented Staff Security Engineer to join our team in Riyadh. If you are looking for a place where you can gain hands-on experience and create a direct impact, then this may be the place for you! As Staff Security Engineer, You'll work on:

Application Security:

• Ensure Implementation of defined secure coding standards.
• Perform manual code/architecture reviews.
• Implement and embed security modules/engines in CI/CD pipelines.
• Contribute with engineers to resolve identified security vulnerabilities.
  
  

Penetration Testing and Red Teaming:

• Perform white/black box VAPTs for Web, Mobile apps, and on-prem/cloud infrastructure.
• Perform advanced red teaming exercises.
• Submit detailed security assessment reports, ensure and follow up on mitigation action plans.
  
  

Cloud Security:

• Implement and maintain security tools as required.
• Improve cloud infrastructure security to handle external and internal threats.
• Improve security monitoring of cloud infrastructure.
  
  

Governance and Resilience:

• Follow all relevant policies, procedures, and processes in order for the daily work to be carried out in a controlled and consistent manner.
• Contribute to the identification of opportunities for continuous improvement of processes, practices, work processes, cost-effectiveness, and productivity enhancement.
• Promote to other employees within the organization the implementation and adherence to policies, procedures, processes, and instructions.
  
  

Daily Operations:

• Follow daily operations relating to the job to ensure work continuity.
• Contribute to preparing timely and accurate reports that concern the line of work to meet the requirements, objectives, and standards.
• Ensure the satisfaction of both internal and external customers by addressing their needs in a courteous and timely manner.
  
  

What you need to be successful

• 8+ years of relevant professional experience in security engineering.
• Bachelor's degree in a related field is required; a Master's degree is highly preferred.
• Certification in OSCP or CDP is mandatory. Certifications such as OSCE and CDE are considered a plus.
• Proven expertise in penetration testing for both web and mobile applications.
• Strong proficiency in application security and the ability to integrate security practices into the CI/CD pipeline.
• Comprehensive knowledge of cloud information security, including the capability to generate and monitor security alerts effectively.
• Familiarity with security infrastructure/operations tools and practices, such as Web Application Firewalls (WAF).
• Experience with cloud penetration testing is an advantage.
  
  

Who we are

HungerStation is part of the Delivery Hero Group, the world’s pioneering local delivery platform, our mission is to deliver an amazing experience—fast, easy, and to your door. We operate in over 70+ countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.

What's in it for you

What We offer:

• We offer relocation support globally to our permanent employees.
• Exchange ideas and meet 2000+ colleagues from different teams within Delivery Hero in our active guilds and through our global tech and product community.
• Develop your skills with your personal educational budget for conferences and external training.
• Access our e-learning platform LinkedIn and participate in our various in-house training programs
• And much more…