Principal Security Engineer

Brak informacji o wynagrodzeniu

SeniorHybryda·WarszawaFull-time·Umowa o pracę

#473813·Dodano wczoraj·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

SecurityIT SecurityCloudCybersecurity

Podsumowanie oferty

As a senior technical contributor on the Platform Security team, you will protect SimCorp’s products, cloud environments, platforms, and operations from cyber threats. You will strengthen security through cloud and application security, detection engineering, and incident response, working with engineering and product teams across the organization.

Wymagania

8+ years of experience in security engineering, cloud security, application security, cyber defense, incident response, or related fields.
Experience working in modern cloud environments, ideally including Microsoft Azure.
Knowledge of cloud security technologies such as Microsoft Defender, Microsoft Sentinel, Entra ID, security monitoring tools, and related services.
Familiarity with Identity and Access Management concepts and security best practices.
Understanding of application security principles, including threat modelling, secure development practices, SAST, DAST, and software composition analysis.
Experience with detection engineering, SIEM technologies, threat hunting, and operational security monitoring.
Knowledge of incident response processes, investigation techniques, and recovery activities.
Experience with vulnerability management, infrastructure hardening, and security risk mitigation.
Familiarity with Infrastructure as Code technologies such as Terraform or Bicep.
Experience with cloud-native technologies, containers, Kubernetes, or similar platform architectures.
Understanding of DevSecOps principles and integrating security into software delivery pipelines.
Knowledge of security frameworks, attack methodologies, and adversary techniques such as MITRE ATT&CK.
Ability to work across stakeholder groups and influence security outcomes through collaboration and technical expertise.
Curiosity and motivation to continuously learn and adapt to the evolving security landscape.
Relevant certifications are welcomed, including Microsoft Security Engineer Associate, Security Operations Analyst, Cybersecurity Architect Expert, or similar industry-recognized certifications.

Obowiązki

Lead security engineering initiatives from planning through implementation across cloud, application, infrastructure, and operational security.
Conduct security assessments, architecture reviews, threat modelling exercises, and risk evaluations.
Analyze security challenges, identify root causes, and work with platform teams on sustainable solutions.
Develop and tune detection capabilities using Microsoft Sentinel, Microsoft Defender, KQL analytics, and related security tooling.
Support logging, monitoring, and event collection standards across the platform.
Participate in incident investigations, containment, recovery, root cause analysis, and post-incident reviews.
Conduct proactive threat hunting across environments and systems within areas of ownership.
Develop and improve incident response playbooks, security runbooks, and operational security processes.
Translate threat intelligence, incident findings, and emerging risks into improvements to security controls, monitoring, and engineering practices.
Identify security risks and define mitigation strategies.
Lead or contribute to secure software development lifecycle initiatives, security taskforces, architecture discussions, and cross-functional security programs.
Embed security into CI/CD pipelines, development workflows, infrastructure platforms, and cloud architectures.
Advise engineers, architects, and product teams on secure decision-making.
Communicate technical risks, security recommendations, and incident findings to technical and non-technical stakeholders, including senior leadership.

Benefity

Flexible working hours.
Modern office with quiet zones and ergonomic workstations.
Base salary with an annual bonus structure.
Holiday allowance upon a two-week vacation.
Employer-paid Medicover Platinum healthcare package; employee-paid family upgrade available.
MyBenefit Cafeteria monthly budget, which can be used for a Multisport card with a 25% employee contribution or other lifestyle options.
Unum group life insurance; employee-paid upgrade available.
Medicover travel insurance for private trips and global business travel insurance.
Possibility to join the Deutsche Börse Group Share Plan after one year of eligibility.
Copyrights program for certain roles.
Professional training and courses provided by SimCorp.
Polish language classes for foreign employees; German and English classes based on business needs.
Integration events, volunteering initiatives, and employee-led clubs.

Elastyczne godziny

Premie

Płatne święta

Opieka zdrowotna

Karta sportowa

Ubezpieczenie

Udziały pracownicze

Szkolenia wewnętrzne

Kursy językowe

Spotkania integracyjne

Inne informacje

Occasional remote work is available across Poland and internationally, subject to internal policy, for up to 24 domestic and 20 international days per year.
Applications must be submitted in English through the company’s career system; incoming applications are processed continually.

SimCorp

43 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz