Security Engineer (Detection & Response) at Hellofresh

Hellofresh

Warszawa, Masovian Voivodeship, Poland·5h ago

Mid LevelFull-timeRustAWSElasticsearchGit

Salary Range

$35,700 - $48,300 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for a Security Engineer to join HelloFresh's HelloTech organization in Warsaw. This role focuses on improving the company's security logging and monitoring program, working with cloud-native SIEM platforms and various security tools in AWS and enterprise IT environments.

Key Responsibilities

→Responsible for SOC monitoring, use-case building, triage, and advisory using cloud-native SIEM platforms
→Conduct initial triage of security events and incidents and document progress throughout the Incident Response Lifecycle
→Automate, optimize, and operate modern security solutions like EDR/EPPs and conventional Firewalls, IDS/IPS, Email Security, VPN, and MDM tools
→Leverage premium and open-source threat intel feeds to regularly sweep environments against rising APT campaigns
→Prepare status reports and follow up with stakeholders through Jira and Incident Mgmt. Platform to close the remediation loop
→Contribute to the continuous improvement of security logging and monitoring maturity

Requirements

✓A minimum of 2 years of experience working in mature SOC environments
✓Security monitoring and incident response experience in public cloud environments such as AWS
✓Experience with cloud SIEM & SOAR platforms, DDoS mitigation and prevention tools, and Layer-7 Web-based perimeter security controls
✓Understanding of network intrusion methods, network containment, segregation techniques, and technologies such as Sandboxes and Intrusion Detection/Prevention Systems (ID/PS)
✓Ability to operate EDR, EPP, and Device Management solutions as per best security practices
✓Decent programming skills to enable data processing, IaC, and security automations
✓Good communication and reporting skills
✓Experience with log analysis stacks like ElasticSearch, Splunk, or SumoLogic
✓Open to working on-call in rotational shifts