Security Engineer

About the role: What's in the Box

We’re looking for a new teammate to join us on the journey of keeping HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and improve HelloFresh’s security posture. 

You will be the first port of call for responding to any of HelloFresh’s security related questions and concerns. You will also develop and deliver tools and processes to enable colleagues to achieve their goals and objectives.

Above all, we are looking for people who will make HelloFresh better. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.

What You’ll Do: The Recipe

• Enhance  the security posture of the enterprise IT infrastructure, services, and tools by hardening them against abuse and nefarious activity
• Implement  secure configurations and policies for IAM, EDR, VPN, Firewalls, Email Security, Slack and MDM tools
• Responsible  for security hardening and posture of enterprise IT assets
• Adapt  to modern AI adoption strategy through implementing and mitigating AI controls in a variety of methods including Shadow AI, MCP integrations, and protecting against AI-based risks
• Deploy, optimize and operate  modern security solutions like EDR, Zero-Trust, SSE/CASB, DLP, and Patch Management tools
• Assist  in company-wide security awareness campaigns and vulnerability patching
• Perform  comparative technical and commercial analysis for various security products/tools prior to procurement

What You’ll Bring: The Ingredients

• Hands-on experience hardening workstations, network equipment, servers, IAM platforms through using CIS/NIST frameworks
• Understanding and usage of Generative AI from a corporate perspective, including LLM guardrails, MCP connections/gateways, and risks stemming from its usage such as prompt injections
• Ability to perform malware analysis on Windows, MacOS, and Linux machines
• Understanding of modern-day social engineering attacks and how to prevent them through technical controls and training
• In-depth understanding of common TCP/IP protocols and modern-day security threats on each network layer and protecting against them