Security engineer

Описание:
Hello Fresh operates as a global food subscription company providing meal kit delivery services.

• Own and elevate secure design and architecture at scale across Hello Fresh
• Define and drive security architecture across cloud environments
• Build and scale cloud security guardrails using automation, policy-as-code, Infrastructure as Code, and platform-native controls
• Partner with engineering and product teams to embed security into the SDLC through threat modeling, secure design reviews, security testing, and developer-friendly remediation workflows
• Build internal security products and capabilities that make security self-serviceable for Hello Fresh employees and engineering teams
• Lead initiatives across SAST, DAST, SCA, IaC scanning, secret detection, vulnerability management, and software supply chain security
• Drive offensive security activities including penetration testing, adversary simulation, purple teaming, and validation of detection and response capabilities
• Establish security patterns and controls for GenAI and AI/ML systems
• Coordinate with external security partners, auditors and consultants to properly scope, conduct and review external security engagements
• Use GenAI as a force multiplier to reduce operational toil, improve security workflows, automate analysis, and accelerate internal capability building
• Mentor senior engineers, influence technical direction, and act as a trusted security advisor across engineering, product, platform, data, and leadership teams

• 8+ Years of experience in security engineering, software engineering, cloud security, application security, or offensive security
• Hands-on experience securing cloud-native environments, preferably AWS, with strong knowledge of IAM, Kubernetes, networking, logging, detection, and infrastructure security
• Application and product security experience, including threat modeling, secure architecture reviews, OWASP risks, API security, and SDLC security
• Practical offensive security experience, including penetration testing, vulnerability research, exploitability analysis, or red/purple team exercises
• Engineering skills in one or more programming languages (e.g., Python, Go, Java, Type Script), with the ability to build production-grade systems and security tooling
• Experience building automation, internal tools, developer platforms, security guardrails, or self-service security capabilities
• Experience securing GenAI, LLM, AI agent, RAG, or ML systems
• Familiarity with OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF, AI gateways, LLM guardrails, prompt evaluation, or AI red teaming
• Familiarity with modern security tooling such as CNAPP/CSPM, SAST, DAST, SCA, IaC scanning, secret scanning, WAF, SIEM, EDR, or vulnerability management platforms
• Ability to influence without authority, communicate complex risks clearly, and translate security problems into scalable engineering solutions

• Competitive compensation package with Hello Fresh-subsidized Pension Scheme
• Berlin relocation support
• Exclusive discounts on weekly Hello Fresh box and office meals
• German language learning budget and access to Hello Fresh Academy
• Mental health support, transportation perks, and working-parent-friendly benefits
• 24/7 Gym access, wellbeing platforms like Headspace and Spill, and sabbatical leave options