Helsing is a Munich-based defence AI and drone company that develops defence software, drones, and military systems for air, land, sea, and underwater operations.
<h2><strong>Who we are</strong></h2> <div> <p><span data-contrast="auto">Helsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards.</span><span data-ccp-props="{"> </span></p> <p><span data-contrast="auto">As democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously.</span><span data-ccp-props="{"> </span></p> <p><span data-contrast="none">We are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers.<span data-contrast="auto"> We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications.</span><span data-ccp-props="{"> </span></span></p> </div> <h2><strong>The role</strong></h2> <div>Security Engineering at Helsing sits at the intersection of deep technical expertise, adversarial thinking, and real-world impact. You'll work across the full breadth of our technology — from cloud infrastructure to applications, identity systems, and products — identifying and reducing the security risks that matter most. The systems we build and the data we handle demand a security posture that is rigorous, adaptive, and deeply embedded in everything we do. You'll directly shape our ability to earn and maintain the trust of partners, customers, and the public, while ensuring our teams can build and ship with confidence. At Helsing, where the stakes of what we build are unusually high, this work is central to delivering on our mission responsibly.</div> <h2><strong>The day-to-day</strong></h2> <ul class="ak-ul" data-local-id="e231caf4-a147-43c2-8a89-40815c3b6e88" data-indent-level="1"> <li> <p data-renderer-start-pos="10968" data-local-id="6e0534467e38">Identify, assess, and prioritise security risks across our systems, products, and infrastructure - distinguishing between theoretical concerns and material threats to the business</p> </li> <li> <p data-renderer-start-pos="11151" data-local-id="f68bc781600f">Design and implement practical security controls across cloud platforms, applications, products, and data - and guide engineering teams in doing the same</p> </li> <li> <p data-renderer-start-pos="11308" data-local-id="1ee91ffa30c1">Develop and apply threat models to surface architectural risks, trust boundary issues, and failure modes before they become incidents</p> </li> <li> <p data-renderer-start-pos="11445" data-local-id="363baaafd1fd">Partner with engineering, product, and operational teams as a trusted security adviser - providing patterns, guidance, and guardrails rather than one-off approvals or blockers</p> </li> <li> <p data-renderer-start-pos="11624" data-local-id="9ce6468ecaad">Contribute to the detection, investigation, and containment of security incidents, and drive systemic improvements from what we learn</p> </li> <li> <p data-renderer-start-pos="11761" data-local-id="76f71588837d">Reduce manual and reactive security work by building automation, improving tooling, and embedding secure-by-default practices into how we develop and operate systems</p> </li> <li> <p data-renderer-start-pos="11930" data-local-id="648850f616bb">Bring technical depth to assurance activities such as audits, certifications, and customer security reviews - ensuring our controls are real and effective, not just documented</p> </li> </ul> <h2 id="You’ll-do-great-if-you….3" data-renderer-start-pos="15247"><strong>You should apply if you</strong></h2> <ul class="ak-ul" data-local-id="b0f9b0da-d8a2-4861-8f4f-0ba5dde3f423" data-indent-level="1"> <li> <p data-renderer-start-pos="12138" data-local-id="4d258e3693c4">Have deep hands-on expertise in one or two security domains - such as application security, cloud security, identity and access management, cryptography, detection and response, or platform security - and can demonstrate genuine impact within them</p> </li> <li> <p data-renderer-start-pos="12389" data-local-id="66289edb69c2">Think in terms of trust boundaries, failure modes, blast radius, and adversarial behaviour rather than individual vulnerabilities in isolation</p> </li> <li> <p data-renderer-start-pos="12535" data-local-id="1cb02f113e90">Can translate complex security risk into language that resonates with non-security stakeholders - engineers, product managers, and senior leadership alike - and influence outcomes without relying on authority</p> </li> <li> <p data-renderer-start-pos="12747" data-local-id="d81d087985b5">Approach security with a risk-based mindset, making proportionate, well-reasoned decisions under uncertainty and consistently asking whether the work you are doing reduces material risk rather than simply satisfying a compliance requirement</p> </li> <li> <p data-renderer-start-pos="12991" data-local-id="ea7dbedac4fe">Have experience working across multiple teams and technical domains simultaneously, maintaining quality and judgement across contexts</p> </li> <li> <p data-renderer-start-pos="13128" data-local-id="f94137688fc4">Have a track record of identifying gaps and driving security improvements to resolution, including in ambiguous or loosely scoped problem spaces</p> </li> </ul> <p><em data-stringify-type="italic">Note: We operate in an industry where women, as well as other minority groups, are systematically</em> <em data-stringify-type="italic">under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.</em></p> <h2><strong>Nice to Have</strong></h2> <ul class="ak-ul" data-local-id="fe8eecc1-62a9-