Security Engineer (SOC) (m,f,x)

The role

We’re looking for a new teammate to join us on the journey of keeping HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and improve HelloFresh’s security posture.

This role aims to improve the HelloFresh Security Logging & Monitoring Program by maturing the tools, processes and playbooks to reduce dwell time (indicators of which would be lowered MTTD&R).

Above all, we are looking for people who will make HelloFresh better. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.

What you’ll do

Responsible for SOC monitoring, use-case building, triage and advisory using cloud-native SIEM platforms

Conduct initial triage of security events and incidents and document progress throughout the Incident Response Lifecycle

Automate, optimize, automate and operate modern security solutions like EDR/EPPs and conventional Firewalls, IDS/IPS, Email Security, VPN, and MDM tools

Leverage premium and open-source threat intel feeds to regularly sweep environments against rising APT campaigns

Prepare status reports and follow up with the stakeholders through Jira and Incident Mgmt. Platform to close the remediation loop

Facilitate efficient Incident Detection and Response in AWS cloud and enterprise IT environments

What you’ll bring

A minimum of 2 years of experience working in mature SOC environments

Security monitoring and incident response experience in public cloud environments such as AWS

Experience with cloud SIEM & SOAR platforms, DDoS mitigation and preventing tools and Layer-7 Web-based perimeter security controls

Understanding of network intrusion methods, network containment, segregation techniques and technologies such as Sandboxes and Intrusion Detection/Prevention Systems