Staff Security Engineer (all genders)

HelloFresh SE; Berlin; Vor Ort; EUR 75.000 - 100.000; Vollzeit

Benefits dieser Stelle

Pension Scheme

Berlin relocation support

German language learning budget

Mental health support

Gym access

Zusammenfassung

IT-Systemhaus der Bundesagentur für Arbeit is looking for a Staff Security Engineer to join the Security Tribe in Berlin. The role involves shaping security capabilities across the organization, with a strong focus on cloud security and building internal security products.

The ideal candidate has over 8 years of experience in various security domains including cloud-native environments and strong programming skills. The position offers a hybrid work model, along with unique perks and a competitive compensation package.

Qualifikationen

• 8+ years of experience in security engineering or software engineering.
• Deep hands-on experience in cloud-native environments, preferably AWS.
• Strong application and product security experience.
• Experience securing GenAI, LLM, AI agent, RAG, or ML systems.

Aufgaben

• Elevate secure design and architecture across HelloFresh.
• Drive security architecture in cloud environments.
• Build internal security products and capabilities.
• Coordinate with external security partners and auditors.

Kenntnisse

Cloud Security

Application Security

Offensive Security

Programming in Python/Go/Java/TypeScript

Tools

AWS

Kubernetes

Security Tooling

Jobbeschreibung

Staff Security Engineer (all genders)

Arbeitsort

Berlin

The role

We are looking for aStaff Security Engineerto join the Security Tribe and help shape the next generation of security capabilities at HelloFresh.

This is a senior individual contributor role for someone who is deeply technical, pragmatic, and builder‑minded. You will work acrossCloud Security, Application & Product Security, Offensive Security, and GenAI Security, with a strong focus on creating scalable internal security products, paved roads, guardrails, and self‑service capabilities for HelloFresh teams.

You will not only identify risks, but also build the systems, automation, and platforms that help engineering teams move faster and safer.

Above all, we are looking for people who willmake HelloFreshbetter.We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.

What you’ll do

• Own and elevate secure design and architecture at scale across HelloFresh— championing a security‑by‑design culture by defining, driving, and embedding robust architectural patterns, reference designs, and guardrails that enable teams to build secure systems by default across the organization.
• Define and drive security architecture across our cloud environments, with a strong focus on AWS, Kubernetes, IAM, network security, workload protection, secrets management, and secure‑by‑default infrastructure.
• Build and scale cloud security guardrails using automation, policy‑as‑code, Infrastructure as Code, and platform‑native controls.
• Partner with engineering and product teams to embed security into the SDLC through threat modeling, secure design reviews, security testing, and developer‑friendly remediation workflows.
• Build internal security products and capabilities that make security self‑serviceable for HelloFresh employees and engineering teams.
• Lead initiatives across SAST, DAST, SCA, IaC scanning, secret detection, vulnerability management, and software supply chain security.
• Drive offensive security activities including penetration testing, adversary simulation, purple teaming, and validation of detection and response capabilities.
• Establish security patterns and controls for GenAI and AI/ML systems, including LLM applications, AI agents, RAG systems, model integrations, prompt injection risks, data leakage, and AI governance.
• Coordinate with external security partners, auditors and consultants to properly scope, conduct and review external security engagements.
• Use GenAI as a force multiplier to reduce operational toil, improve security workflows, automate analysis, and accelerate internal capability building.
• Mentor senior engineers, influence technical direction, and act as a trusted security advisor across engineering, product, platform, data, and leadership teams.

What you’ll bring

• 8+ years of experience in security engineering, software engineering, cloud security, application security, or offensive security.
• Deep hands‑on experience securing cloud‑native environments, preferably AWS, with strong knowledge of IAM, Kubernetes, networking, logging, detection, and infrastructure security.
• Strong application and product security experience, including threat modeling, secure architecture reviews, OWASP risks, API security, and SDLC security.
• Practical offensive security experience, including penetration testing, vulnerability research, exploitability analysis, or red/purple team exercises.
• Strong engineering skills inone or more programming languages (e.g., Python, Go, Java, TypeScript), with the ability to build production‑grade systems and security tooling.
• Experience building automation, internal tools, developer platforms, security guardrails, or self‑service security capabilities.
• Experience securing GenAI, LLM, AI agent, RAG, or ML systems.
• Familiarity with OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF, AI gateways, LLM guardrails, prompt evaluation, or AI red teaming.
• Familiarity with modern security tooling such as CNAPP/CSPM, SAST, DAST, SCA, IaC scanning, secret scanning, WAF, SIEM, EDR, or vulnerability management platforms.
• Ability to influence without authority, communicate complex risks clearly, and translate security problems into scalable engineering solutions.

What we offer

Elevate your lifestyle! Join one of Europe's fastest‑growing tech powerhouses in a dynamic phase of expansion.

• Immerse yourself in a diverse global community of 90+ nationalities.
• Enjoy a competitive compensation package that goes beyond the norm, with perks like a HelloFresh- subsidized Pension Scheme, Berlin relocation support, and a Hybrid working model.
• Elevate your lifestyle with exclusive discounts on your weekly HelloFresh box and office meals.
• Invest in your growth with a German language learning budget, and access to the HelloFresh Academy.
• Plus, we've got your well‑being covered with mental health support, transportation perks, and working‑parent‑friendly benefits. From our 24/7 gym access, wellbeing platforms like Headspace and Spill, to sabbatical leave options, HelloFresh is not just a workplace; it's a lifestyle of perks and possibilities!