Posted 27 Aug 2026 (71 days ago) · Job 9978 · Read from the employer's Greenhouse board, last checked 6 Nov 2026, 10:56 UTC

Security Engineer (ITSec) (m,f,x)

HelloFresh · Berlin, Berlin, Germany

Apply on HelloFresh’s siteAsk about this jobApply opens the employer’s own application. Nothing is sent from here.

What the posting says

Each fact was read from this posting and checked:Statedin the posting, quotedConflictsposted two ways, both shownNot mentionedwe looked; it is not there

Work arrangementStated
Hybrid

Not mentioned in this posting

We read the whole posting. These are not in it. Not a no: ask the recruiter, in your own words.

PayNot mentioned
The posting does not say
Employment typeNot mentioned
The posting does not say
ShiftNot mentioned
The posting does not say
ExperienceNot mentioned
The posting does not say
EducationNot mentioned
The posting does not say
Visa sponsorshipNot mentioned
The posting does not say

Requirements, each with its sentence from the posting

These are the employer’s words. The index does not judge whether you meet them.

  • Enterprise IT infrastructure hardeningrequired

    Hands-on experience hardening workstations, network equipment, servers, IAM platforms through using CIS/NIST frameworksfrom the posting

  • CIS/NIST frameworksrequired

    Hands-on experience hardening workstations, network equipment, servers, IAM platforms through using CIS/NIST frameworksfrom the posting

  • Generative AI understandingrequired

    Understanding and usage of Generative AI from a corporate perspective, including LLM guardrails, MCP connections/gateways, and risks stemming from its usagefrom the posting

  • LLM guardrails and MCP integrationrequired

    Understanding and usage of Generative AI from a corporate perspective, including LLM guardrails, MCP connections/gatewaysfrom the posting

  • Malware analysisrequired

    Ability to perform malware analysis on Windows, MacOS, and Linux machinesfrom the posting

  • Windows, MacOS, and Linuxrequired

    Ability to perform malware analysis on Windows, MacOS, and Linux machinesfrom the posting

  • Social engineering attack preventionrequired

    Understanding of modern-day social engineering attacks and how to prevent them through technical controls and trainingfrom the posting

  • TCP/IP protocolsrequired

    In-depth understanding of common TCP/IP protocols and modern-day security threats on each network layerfrom the posting

  • Network securityrequired

    In-depth understanding of common TCP/IP protocols and modern-day security threats on each network layer and protecting against themfrom the posting

  • Communication and reporting skillsrequired

    Good communication and reporting skillsfrom the posting

Read the full posting as the employer wrote it

About the role: What's in the Box

We’re looking for a new teammate to join us on the journey of keeping HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and improve HelloFresh’s security posture. 

You will be the first port of call for responding to any of HelloFresh’s security related questions and concerns. You will also develop and deliver tools and processes to enable colleagues to achieve their goals and objectives.

Above all, we are looking for people who will make HelloFresh better. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.

What You’ll Do: The Recipe

  • Enhance  the security posture of the enterprise IT infrastructure, services, and tools by hardening them against abuse and nefarious activity
  • Implement  secure configurations and policies for IAM, EDR, VPN, Firewalls, Email Security, Slack and MDM tools
  • Responsible  for security hardening and posture of enterprise IT assets
  • Adapt  to modern AI adoption strategy through implementing and mitigating AI controls in a variety of methods including Shadow AI, MCP integrations, and protecting against AI-based risks
  • Deploy, optimize and operate  modern security solutions like EDR, Zero-Trust, SSE/CASB, DLP, and Patch Management tools
  • Assist  in company-wide security awareness campaigns and vulnerability patching
  • Perform  comparative technical and commercial analysis for various security products/tools prior to procurement

What You’ll Bring: The Ingredients

  • Hands-on experience hardening workstations, network equipment, servers, IAM platforms through using CIS/NIST frameworks
  • Understanding and usage of Generative AI from a corporate perspective, including LLM guardrails, MCP connections/gateways, and risks stemming from its usage such as prompt injections
  • Ability to perform malware analysis on Windows, MacOS, and Linux machines
  • Understanding of modern-day social engineering attacks and how to prevent them through technical controls and training
  • In-depth understanding of common TCP/IP protocols and modern-day security threats on each network layer and protecting against them
  • Good communication and reporting skills

What we Offer: The Toppings

Elevate your lifestyle! Join one of Europe's fastest-growing tech powerhouses in a dynamic phase of expansion.

  • Immerse yourself in a diverse global community of 90+ nationalities.
  • Enjoy a competitive compensation package that goes beyond the norm, with perks like a HelloFresh- subsidized Pension Scheme and a Hybrid working model.
  • Elevate your lifestyle with exclusive discounts on your weekly HelloFresh box and office meals.
  • Invest in your growth with a German language learning budget, and access to the HelloFresh Academy.
  • Plus, we've got your well-being covered with mental health support, transportation perks, and working-parent-friendly benefits. From our 24/7 gym access,wellbeing platforms like Headspace and Spill, to sabbatical leave options, HelloFresh is not just a workplace; it's a lifestyle of perks and possibilities!

 

The posting text is reproduced as the employer wrote it; the index adds nothing to it.