Security Engineer (ITSec) (m,f,x)

<h2><strong>About the role: What's in the Box</strong></h2> <p>We’re looking for a new teammate to join us on the journey of keeping HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and improve HelloFresh’s security posture.&nbsp;</p> <p>You will be the first port of call for responding to any of HelloFresh’s security related questions and concerns. You will also develop and deliver tools and processes to enable colleagues to achieve their goals and objectives.</p> <p>Above all, we are looking for people who will&nbsp;<strong>make HelloFresh</strong>&nbsp;<strong>better.</strong>&nbsp;We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.</p> <h2><strong>What You’ll Do: The Recipe</strong></h2> <ul> <li><strong>Enhance&nbsp; </strong>the security posture of the enterprise IT infrastructure, services, and tools by hardening them against abuse and nefarious activity</li> <li><strong>Implement&nbsp; </strong>secure configurations and policies for IAM, EDR, VPN, Firewalls, Email Security, Slack and MDM tools</li> <li><strong>Responsible&nbsp; </strong>for security hardening and posture of enterprise IT assets</li> <li><strong>Adapt&nbsp; </strong>to modern AI adoption strategy through implementing and mitigating AI controls in a variety of methods including Shadow AI, MCP integrations, and protecting against AI-based risks</li> <li><strong>Deploy, optimize and operate&nbsp; </strong>modern security solutions like EDR, Zero-Trust, SSE/CASB, DLP, and Patch Management tools</li> <li><strong>Assist&nbsp; </strong>in company-wide security awareness campaigns and vulnerability patching</li> <li><strong>Perform&nbsp; </strong>comparative technical and commercial analysis for various security products/tools prior to procurement</li> </ul> <h2><strong>What You’ll Bring: The Ingredients</strong></h2> <ul> <li>Hands-on experience hardening workstations, network equipment, servers, IAM platforms through using CIS/NIST frameworks</li> <li>Understanding and usage of Generative AI from a corporate perspective, including LLM guardrails, MCP connections/gateways, and risks stemming from its usage such as prompt injections</li> <li>Ability to perform malware analysis on Windows, MacOS, and Linux machines</li> <li>Understanding of modern-day social engineering attacks and how to prevent them th