<h2><strong>The role</strong></h2> <p>We are looking for a <strong>Principal Security Engineer</strong> to serve as one of HelloFresh's most senior technical authorities in Security — shaping how we protect the company today while defining the security foundations we will need for the future.
</p> <p>This is not a Principal role defined by ownership of a single security domain.
<strong>Your domain is HelloFresh.
</strong></p> <p>You will operate at the intersection of <strong>technology strategy, security architecture, engineering and business risk</strong>, influencing some of the most consequential technical decisions we make.
You will partner with senior Engineering, Product, Data, IT and business leadership to ensure security is not something applied after strategic decisions are made, but a fundamental input into those decisions.
</p> <p>You <strong>think in systems, not Initiatives — and in years, not quarters.
</strong></p> <p>Where others see an IAM issue, application vulnerability, endpoint incident or AI risk, you look for the architectural condition connecting them.
You ask not only <em>“How do we fix this?”</em> but <em>“Why can this class of failure exist at HelloFresh, and what should we change so that it becomes difficult by design?”</em></p> <p><strong>Your job is not merely to secure the systems HelloFresh has today.
It is to influence what HelloFresh builds next, define the security architecture that makes it possible, and raise the technical capability of the organisation so that secure-by-default becomes a property of the company itself.
</strong></p> <p></p> <p>You will bring exceptional breadth across <strong>Cloud Security, Application & Product Security, Vulnerability Management, Offensive Security, Detection & Response, Enterprise IT Security, IAM & Zero Trust, Endpoint/MDM, Governance & Risk, Third-Party & Supply-Chain Security, and GenAI Security</strong> — with the depth and judgment to challenge our strongest spec.