We are looking for a highly talented Staff Security Engineer to join our team in Riyadh. If you are seeking a position where you can gain hands-on experience and make a direct impact, this may be the opportunity for you!
Key Responsibilities:
-
Application Security:
- Ensure implementation of defined secure coding standards.
- Perform manual code and architecture reviews.
- Implement security modules/engines in CI/CD pipelines.
- Work with engineers to resolve identified security vulnerabilities.
-
Penetration Testing and Red Teaming:
- Conduct white/black box Vulnerability Assessments and Penetration Tests (VAPTs) for Web, Mobile apps, and on-prem/cloud infrastructure.
- Execute advanced red teaming exercises and submit detailed security assessment reports, ensuring follow-up on mitigation action plans.
-
Cloud Security:
- Implement and maintain security tools as required.
- Enhance cloud infrastructure security against external and internal threats.
- Improve security monitoring of cloud infrastructure.
-
Governance and Resilience:
- Adhere to relevant policies and procedures to maintain a controlled work environment.
- Identify opportunities for continuous improvement in processes and productivity.
- Promote adherence to policies and procedures within the organization.
-
Daily Operations:
- Manage daily operations to ensure work continuity.
- Prepare timely and accurate reports to meet objectives and standards.
- Ensure satisfaction of both internal and external customers by addressing their needs courteously and promptly.
Requirements:
- 8+ years of relevant professional experience in security engineering.
- Bachelor's degree in a related field is required; a Master's degree is highly preferred.
- Certification in OSCP or CDP is mandatory; OSCE and CDE are considered a plus.
- Proven expertise in penetration testing for web and mobile applications.
- Strong proficiency in application security and CI/CD pipeline integration.
- Comprehensive knowledge of cloud information security and monitoring.
- Familiarity with security infrastructure/operations tools (e.g., Web Application Firewalls).
- Experience with cloud penetration testing is an advantage.
Who We Are:
HungerStation is part of the Delivery Hero Group, the world’s pioneering local delivery platform. We strive to deliver an amazing experience—fast, easy, and to your door. Operating in over 70+ countries worldwide and headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017.
What We Offer:
- Global relocation support for permanent employees.
- Opportunities to exchange ideas and meet over 2000 colleagues across different teams within the Delivery Hero community.
- Personal educational budget for conferences and external training.
- Access to our e-learning platform and various in-house training programs.
- Additional benefits and opportunities for growth.
