Security Engineer - SOC, Cloud IR & Automation

HelloFresh; Berlin (NH); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

HelloFresh Pension Scheme

Hybrid working model

HelloFresh box discounts

German language learning budget

HelloFresh Academy

Mental health support

Transportation perks

Sabbatical leave options

Headspace & Spill wellbeing platforms

Gym access 24/5

Job summary

HelloFresh in the United States is seeking a Security Engineer to strengthen the Security Logging & Monitoring program and mature tools, processes, and playbooks. You will focus on reducing dwell time and improving incident response across cloud and on-prem environments.

The role emphasizes automation, threat intel usage, and collaboration with stakeholders to close remediation loops and enhance overall security posture.

Qualifications

• 2+ years in mature SOC environments.
• Experience with cloud security in AWS.
• Experience with cloud SIEM & SOAR platforms.
• Understanding of network security controls and IDS/IPS.
• Ability to operate EDR/EPP and device mgmt solutions.
• Decent programming skills for data processing and security automations.

Responsibilities

• SOC monitoring, use-case building, triage and advisory.
• Initial triage of security events and incidents; document progress.
• Automate and operate security solutions (EDR, firewalls, IPS, VPN, MDM).
• Use threat intel feeds to scan environments for threats.
• Prepare status reports and coordinate remediation in Jira/Incident Mgmt.
• Support Incident Detection and Response in AWS and on-prem environments.

Skills

SOC monitoring

Cloud security (AWS)

Incident response

EDR/EPP

Threat intel & IOC

Security automation (IaC)

Tools

ElasticSearch

Splunk

Sumo Logic

Job description

HelloFresh in the United States is seeking a Security Engineer to strengthen the Security Logging & Monitoring program and mature tools, processes, and playbooks. You will focus on reducing dwell time and improving incident response across cloud and on-prem environments.

The role emphasizes automation, threat intel usage, and collaboration with stakeholders to close remediation loops and enhance overall security posture.