HelloFresh

2 months ago

Staff Security Engineer (m,f,x)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Senior, hands-on security engineer responsible for securing HelloFresh’s cloud, application, and GenAI security. You’ll define secure-by-design architectures, build scalable guardrails and internal security products, and partner with engineering to embed security across the SDLC, while leading offensive security and GenAI security initiatives.

Location: Berlin

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own and elevate secure design and architecture at scale across HelloFresh — championing a security-by-design culture by defining, driving, and embedding robust architectural patterns, reference designs, and guardrails that enable teams to build secure systems by default across the organization.
•Define and drive security architecture across our cloud environments, with a strong focus on AWS, Kubernetes, IAM, network security, workload protection, secrets management, and secure-by-default infrastructure.
•Build and scale cloud security guardrails using automation, policy-as-code, Infrastructure as Code, and platform-native controls.
•Partner with engineering and product teams to embed security into the SDLC through threat modeling, secure design reviews, security testing, and developer-friendly remediation workflows.
•Build internal security products and capabilities that make security self-serviceable for HelloFresh employees and engineering teams.

Pay and Benefits

Perks:RelocationHybrid WorkLearning Budget

Key Requirements

•8+ years of experience in security engineering, software engineering, cloud security, application security, or offensive security.
•Deep hands-on experience securing cloud-native environments, preferably AWS, with strong knowledge of IAM, Kubernetes, networking, logging, detection, and infrastructure security.
•Strong application and product security experience, including threat modeling, secure architecture reviews, OWASP risks, API security, and SDLC security.
•Practical offensive security experience, including penetration testing, vulnerability research, exploitability analysis, or red/purple team exercises.
•Strong engineering skills in one or more programming languages (e.g., Python, Go, Java, TypeScript), with the ability to build production-grade systems and security tooling.

Experience:8+ yearsSecurityCloud securityGenAI security

Skills:LeadershipCommunicationProblem-solving

Languages:English

Tech Stack:AWSKubernetesIAMNetwork securitySASTDASTSCAIaCWAFSIEMEDRPythonGoJavaTypeScript

Company Brief

HelloFresh

HelloFresh is a meal-kit and food subscription company that delivers fresh ingredients and recipes to consumers, offering convenient home-cooked meals through weekly subscription boxes across multiple international markets.

Industry: FoodTech

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Berlin, Germany

Founded: 2011

Glassdoor: 3.6

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

HelloFresh

2 months ago

Staff Security Engineer (m,f,x)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Location: Berlin

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own and elevate secure design and architecture at scale across HelloFresh — championing a security-by-design culture by defining, driving, and embedding robust architectural patterns, reference designs, and guardrails that enable teams to build secure systems by default across the organization.
•Define and drive security architecture across our cloud environments, with a strong focus on AWS, Kubernetes, IAM, network security, workload protection, secrets management, and secure-by-default infrastructure.
•Build and scale cloud security guardrails using automation, policy-as-code, Infrastructure as Code, and platform-native controls.
•Partner with engineering and product teams to embed security into the SDLC through threat modeling, secure design reviews, security testing, and developer-friendly remediation workflows.
•Build internal security products and capabilities that make security self-serviceable for HelloFresh employees and engineering teams.

Pay and Benefits

Perks:RelocationHybrid WorkLearning Budget

Key Requirements

•8+ years of experience in security engineering, software engineering, cloud security, application security, or offensive security.
•Deep hands-on experience securing cloud-native environments, preferably AWS, with strong knowledge of IAM, Kubernetes, networking, logging, detection, and infrastructure security.
•Strong application and product security experience, including threat modeling, secure architecture reviews, OWASP risks, API security, and SDLC security.
•Practical offensive security experience, including penetration testing, vulnerability research, exploitability analysis, or red/purple team exercises.
•Strong engineering skills in one or more programming languages (e.g., Python, Go, Java, TypeScript), with the ability to build production-grade systems and security tooling.

Experience:8+ yearsSecurityCloud securityGenAI security

Skills:LeadershipCommunicationProblem-solving

Languages:English

Tech Stack:AWSKubernetesIAMNetwork securitySASTDASTSCAIaCWAFSIEMEDRPythonGoJavaTypeScript

Company Brief

HelloFresh

Industry: FoodTech

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Berlin, Germany

Founded: 2011

Glassdoor: 3.6

Website LinkedIn