Principal Security Engineer, Security Tribe

We are looking for a

We are looking for a Principal Security Engineer to serve as one of Hello Fresh's most senior technical authorities in Security — shaping how we protect the company today while defining the security foundations we will need for the future.

This is not a Principal role defined by ownership of a single security domain.

Your domain is Hello Fresh.

You will operate at the intersection of technology strategy, security architecture, engineering and business risk
, influencing some of the most consequential technical decisions we make. You will partner with senior Engineering, Product, Data, IT and business leadership to ensure security is not something applied after strategic decisions are made, but a fundamental input into those decisions.

You think in systems, not Initiatives — and in years, not quarters. Where others see an IAM issue, application vulnerability, endpoint incident or AI risk, you look for the architectural condition connecting them. You ask not only “How do we fix this?” but “Why can this class of failure exist at Hello Fresh, and what should we change so that it becomes difficult by design?”

Your job is not merely to secure the systems Hello Fresh has today. It is to influence what Hello Fresh builds next, define the security architecture that makes it possible, and raise the technical capability of the organisation so that secure-by-default becomes a property of the company itself. You will bring exceptional breadth across Cloud Security, Application & Product Security, Vulnerability Management, Offensive Security, Detection & Response, Enterprise IT Security, IAM & Zero Trust, Endpoint/MDM, Governance & Risk, Third-Party & Supply-Chain Security, and GenAI Security — with the depth and judgment to challenge our strongest specialists and go hands-on when the hardest problems demand it.

• Demonstrate strong bias for action, moving quickly from ambiguity and constraints to clear decisions, ownership, and measurable outcomes. Balance speed with sound judgment, ensuring critical security risks are addressed decisively without creating unnecessary process or delay.
• Make Security AI-native. Identify operational work across Security that should no longer require repetitive human execution. Drive agents, automation, internal security products and self-service capabilities that encode security expertise and make it available at company scale — with appropriate permissions, human oversight, evaluation and auditability.
• Shape company and Group strategy through Security. Act as a strategic technical advisor to senior and executive leadership, influencing multi-year technology and business strategy across platforms, products, cloud, enterprise technology, AI, acquisitions and emerging technologies. Translate complex security issues into choices involving customer trust, resilience, engineering velocity, investment and business risk.
• Own and elevate secure design and architecture at scale across Hello Fresh. Define our security architectural principles, reference architectures, trust boundaries, standards, patterns and guardrails with the security leads. Act as a senior technical advisor for our most consequential architecture and security-risk decisions.
• Connect the entire security system. Establish coherent technical direction across Cloud Security, App Sec/Product Security, Vulnerability Management, Offensive Security, Detection & Response, IT Security, IAM/Zero Trust, Endpoint & MDM, GRC and Third-Party/Supply-Chain Security. Identify systemic risks that individual teams cannot see or solve in isolation. Bring the industry perspective to implementation.
• Eliminate classes of risk, not individual findings. Drive secure-by-default cloud and…