Security Engineer (ITSec) (m,f,x)

About this role

Responsibilities

• We’re looking for a new teammate to join us on the journey of keeping HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and improve HelloFresh’s security posture.
• You will be the first port of call for responding to any of HelloFresh’s security related questions and concerns. You will also develop and deliver tools and processes to enable colleagues to achieve their goals and objectives.
• Above all, we are looking for people who will make HelloFresh better. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.
• What you’ll do
• Enhance the security posture of the enterprise IT infrastructure, services, and tools by hardening them against abuse and nefarious activity
• Implement secure configurations and policies for IAM, EDR, VPN, Firewalls, Email Security, Slack and MDM tools
• Responsible for security hardening and posture of enterprise IT assets
• Adapt to modern AI adoption strategy through implementing and mitigating AI controls in a variety of methods including Shadow AI, MCP integrations, and protecting against AI-based risks
• Deploy, optimize and operate modern security solutions like EDR, Zero-Trust, SSE/CASB, DLP, and Patch Management tools
• Assist in company-wide security awareness campaigns and vulnerability patching
• Perform comparative technical and commercial analysis for various security products/tools prior to procurement
• What you’ll bring
• Hands-on experience hardening workstations, network equipment, servers, IAM platforms through using CIS/NIST frameworks
• Understanding and usage of Generative AI from a corporate perspective, including LLM guardrails, MCP connections/gateways, and risks stemming from its usage such as prompt injections
• Ability to perform malware analysis on Windows, MacOS, and Linux machines
• Understanding of modern-day social engineering attacks and how to prevent them through technical controls and training
• In-depth understanding of common TCP/IP protocols and modern-day security threats on each network layer and protecting against them
• Good communication and reporting skills