security engineer in SOC

HelloFresh operates in the food and consumer services sector and provides weekly meal boxes and office meals.

• Monitor the SOC, build use cases, triage events, and provide advisory support using cloud-native SIEM platforms;
• Conduct initial triage of security events and incidents and document progress throughout the Incident Response Lifecycle;
• Automate, optimize, and operate EDR/EPPs, Firewalls, IDS/IPS, Email Security, VPN, and MDM tools;
• Use premium and open-source threat intelligence feeds to sweep environments against emerging APT campaigns;
• Prepare status reports and follow up with stakeholders through Jira and the Incident Management Platform to close the remediation loop;
• Facilitate Incident Detection and Response in AWS cloud and enterprise IT environments.

• At least 2 years of experience working in mature SOC environments;
• Security monitoring and incident response experience in public cloud environments such as AWS;
• Experience with cloud SIEM and SOAR platforms, DDoS mitigation and prevention tools, and Layer-7 web-based perimeter security controls;
• Understanding of network intrusion methods, network containment, segregation techniques, Sandboxes, and Intrusion Detection/Prevention Systems (ID/PS);
• Ability to operate EDR, EPP, and Device Management solutions according to security best practices;
• Decent programming skills for data processing, IaC, and security automation;
• Good communication and reporting skills;
• Experience with log analysis stacks such as ElasticSearch and Splunk/SumoLogic;
• Openness to working on-call in rotational shifts.

• Contract employment;
• Hybrid working model;
• Subsidized Pension Scheme;
• Discounts on HelloFresh boxes and office meals;
• German language learning budget;
• Access to the HelloFresh Academy;
• Mental health support and transportation perks;
• Working-parent-friendly benefits;
• 24/7 Gym access and wellbeing platforms including Headspace and Spill;
• Sabbatical leave options.