Cyber Defense Engineer

Stack

Responsibilities

• ▹Participate in the Incident Response (IR) function, investigating and responding to security incidents in a timely manner
• ▹Automate IR and defense center activities using playbooks, automation rules, and scripts
• ▹Tune and develop detection rules to maintain strong coverage and a high true-positive rate
• ▹Collaborate with IT and other stakeholders on hardening configurations for laptops and servers, and with the Privacy team on notifications in the event of a data disclosure
• ▹Ensure ongoing compliance with standards and frameworks such as ISO 27001, SOC 2, and DORA

Requirements

• ▹3+ years of experience in defense engineering or incident response, with hands-on detection configuration expertise
• ▹Strong understanding of cloud environments and security tooling (SIEM/XDR/EDR such as Microsoft Sentinel or Defender); Azure knowledge is a plus
• ▹Strong understanding of attacker methodologies, TTPs, and attack paths in cloud environments and across Windows, macOS, and Linux
• ▹Proficiency in scripting and KQL (Kusto Query Language) or similar query languages
• ▹Working knowledge of APIs for security tooling (e.g., Microsoft Graph, Defender, Purview)
• ▹Proficient English, both written and verbal

What we offer

• ▹A flexible work setting that fosters creativity and encourages thinking beyond conventional boundaries
• ▹Startup agility combined with the resources of a well-established organization

About the company

SAP Fioneer, spun out of SAP, helps financial services companies achieve speed, scalability, and cost-efficiency through innovative software solutions and platforms.