https://www.linkedin.com/jobs/view/2448467355/?refId=6b5f5110-2cba-4591-b355-d56b4bfb733b

Security Engineering Manager - Application Security (f/m/d)

Delivery Hero

Germany, Europe

We are looking for a Security Engineering Manager-(Application Security)to join our team and reinvent on-demand delivery with us. If you are a creative problem solver who is eager to deliver solutions and hungry for a new adventure, an international workplace is waiting for you in the heart of Berlin! This position will be accountable for establishing and maintaining the Application Security Program for Delivery Hero. It involves scheduling penetration tests, Bug Bounty program, ensuring remediation of discovered vulnerabilities, Application security consultancy, extending security automation and more. Your Mission: Lead and manage the Delivery hero Application Security team, Report to the Delivery Hero Director of global Security, Design, build and extend the Application security team locally and globally, Manage and maintain application security framework, standards, policies and guidelines, Enhance existing measurements and metrics to track and improve security posture, Align and embed Application Security processes into existing engineering teams globally, Develop and maintain application security management and resolution tracking systems, Align with our business units to ensure all key assets are covered. Your Heroic Skills: Experience risk management, implementing, configuring, deploying, security tools for big companies in a fast changing environment , Previous experience working as information security manager, Understanding of People Centric Security, Familiarity with one or more cloud vendor services and management tools (AWS, GCP) and agile practices and processes (Scrum, You have ability to read and break code in languages such as Python, Java,Ruby, C/C++ and PHP , Working knowledge of common application and network security assessment tools and techniques, Experience with vulnerability management (identifying, tracking, prioritizing, and collaboration with responsible teams to resolve) , Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols), Extensive knowledge and ability to explain all vulnerabilities and weaknesses as defined in OWASP Top 10 and WASC , Fluency in English Strong oral, written and interpersonal communication skills , Strong leadership skills with the ability to work effectively within cross-team collaborations, Strong technical aptitude with a desire to learn new skills and industry trends. Required Qualifications: Minimum 7 years experience in Information Application Security, Strong systems engineering background, Strong understanding of NIST and ISO frameworks, Certifications like OSCP, OSCE and CISM, Team player who can get along with others both inside and outside the company. 