The role

We’re looking for a new teammate to join us on the journey of keeping HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and improve HelloFresh’s security posture.

You will be part of the squad responsible for maintaining and improving HelloFresh’s Vulnerability Management Program which provides umbrella coverage to Pentest, Red Teaming, Cloud Assessment, Source Code Review, use of vulnerable dependencies, Supply Chain Audits and Bug Bounty program.

What you’ll do

• Perform network/cloud penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments


• Develop comprehensive and accurate reports and presentations for both technical and executive audiences


• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel


• Use formal project management skills in planning, tracking, and reporting to close the remediation loop


• Recognize and safely utilize attacker tools, tactics, and procedures used to perform analysis and identify vulnerabilities


• Develop scripts, tools, or methodologies to improve HelloFresh's Vulnerability Management Program

What you’ll bring

• 1-3 years' experience demonstrating above average ability in any 3 of the following areas of offensive security: Network, Wireless, Cloud, Web, Mobile, API Assessments, Source Code Review, Red Teaming, Social Engineering
  Proficiency in identifying vulnerabilities by analyzing web & network based artefacts leveraging ATT&CK matrix, OWASP security testing guide and other penetration testing methodology.


• Thorough understanding of network protocols, data on the wire, client-server model, application design and architecture, and different classes of application security flaws


• Proven proficiency in one modern scripting language like Python or Go


• Relevant application penetration testing certifications such as Offensive Security Web Expert (OSWE) certification, GIAC Web Application Penetration Tester (GWAPT), or equivalent mobile/web certification


• Participation in web hacking challenges, competitions or bug bounties
  Strong knowledge of tools used for cloud, wireless, web application, and network security testing

What we offer

• Comprehensive relocation assistance to move to Berlin plus visa application support Healthy discount on weekly HelloFresh boxes


• Annual learning and development budget to attend conferences or purchase educational resources plus access to the HelloFresh Academy


• Subsidised childcare with a professional nannying agency
  Free access to Headspace, biweekly in-house yoga classes (remote since March 2020)


• A diverse and vibrant international environment of 70+ different nationalities


• Additional perks include: Free crash course in German, compensation for advanced external German classes, discounts for our neighboring gym & Urban Sports Club, summer & winter parties, discount on our HelloFresh GO vending machines


• The chance to have a significant impact on one of the fastest-growing technology companies in Europe in an exciting growth phase