Principal Security Engineer

For over 50 years, SimCorp has worked closely with investment and asset managers to become the world’s leading provider of integrated investment management solutions. They have over 3,000 colleagues with diverse nationalities and backgrounds. SimCorp is an independent subsidiary of the Deutsche Börse Group and recently merged with Axioma to offer a full front-to-back industry-leading solution for clients.

• 8+ years of experience in security engineering, cloud security, application security, cyber defense, or incident response.
• Experience with modern cloud environments, preferably Microsoft Azure.
• Knowledge of cloud security technologies such as Microsoft Defender, Microsoft Sentinel, Entra ID, and related security tools.
• Familiarity with Identity and Access Management concepts and security best practices.
• Understanding of application security principles including threat modelling, secure development, SAST, DAST, and software composition analysis.
• Experience with detection engineering, SIEM technologies, threat hunting, and operational security monitoring.
• Knowledge of incident response processes and recovery.
• Experience with vulnerability management, infrastructure hardening, and security risk mitigation.
• Familiarity with Infrastructure as Code tools like Terraform or Bicep.
• Experience with cloud-native technologies, containers, Kubernetes, and modern platform architectures.
• Understanding of DevSecOps principles and security integration in software delivery.
• Knowledge of security frameworks and adversary techniques such as MITRE ATT&CK.
• Ability to collaborate with multiple stakeholders and influence security outcomes.
• Motivation for continuous learning and adaptation in security.
• Relevant certifications welcomed, including Microsoft Security Engineer Associate, Security Operations Analyst, Cybersecurity Architect Expert.

• Lead security engineering initiatives across cloud, application, infrastructure, and operational security domains.
• Conduct security assessments, architecture reviews, threat modelling, and risk evaluations.
• Analyze security challenges and design sustainable solutions with platform teams.
• Develop and tune detection capabilities using Microsoft Sentinel, Microsoft Defender, and KQL analytics.
• Define and implement logging, monitoring, and event collection standards.
• Participate in incident response activities including investigation, containment, recovery, and post-incident reviews.
• Conduct proactive threat hunting.
• Develop and improve incident response playbooks and operational security processes.
• Translate threat intelligence and incident findings into security control improvements.
• Identify and mitigate security risks proactively.
• Lead or contribute to secure software development lifecycle initiatives and security programs.
• Embed security into CI/CD pipelines, development workflows, infrastructure platforms, and cloud architectures.
• Serve as a trusted security advisor for engineering and product teams.
• Communicate technical risks and security recommendations effectively to stakeholders and senior leadership.

Only applications sent through SimCorp's career system are processed. Applicants are requested to exclude personal data such as photo, age, or non-professional information to mitigate bias. The role is open for applicants in Poland with occasional international remote work options subject to policy.