Principal Security Engineer

Quick Facts

• Role: Principal Security Engineer (Platform Security)
• Focus: Cloud, application, infrastructure, and operational security

Description

Lead security engineering initiatives across cloud, application, infrastructure, and operational security. Perform security assessments, architecture reviews, threat modeling, and risk evaluations, and improve detection and response capabilities using Microsoft Sentinel/Defender and KQL analytics. Translate threat intelligence and incident learnings into tangible control, monitoring, and engineering practice improvements at scale.

Responsibilities

• Lead end-to-end security engineering initiatives from planning through implementation
• Conduct security assessments, architecture reviews, threat modeling, and risk evaluations
• Analyze security challenges across domains and drive root-cause remediation
• Develop and tune detections and detection capabilities (Microsoft Sentinel, Microsoft Defender, KQL)
• Define logging, monitoring, and event collection standards for the platform
• Participate in incident response: investigation, containment, recovery, root cause analysis, post-incident reviews
• Perform proactive threat hunting within areas of ownership
• Build and improve incident response playbooks, security runbooks, and operational security processes
• Convert threat intelligence and emerging risks into improved security controls and monitoring
• Identify security risks early and define mitigation strategies
• Support secure SDLC, security taskforces, architecture discussions, and cross-functional security programs
• Embed security into CI/CD pipelines, development workflows, and cloud architectures
• Advise engineers, architects, and product teams on secure decision-making
• Communicate technical risks and recommendations to technical and non-technical stakeholders, including leadership

Requirements

• 8+ years of experience in security engineering, cloud security, application security, cyber defense, incident response, or related fields
• Experience working in modern cloud environments, ideally Microsoft Azure
• Knowledge of cloud security technologies such as Microsoft Defender and Microsoft Sentinel
• Familiarity with Identity and Access Management concepts and security best practices
• Application security knowledge: threat modeling, secure development, SAST, DAST, software composition analysis
• Detection engineering experience: SIEM, threat hunting, and operational security monitoring
• Knowledge of incident response processes, investigation, and recovery
• Experience with vulnerability management, infrastructure hardening, and security risk mitigation
• Familiarity with Infrastructure as Code (Terraform or Bicep)
• Experience with cloud-native technologies (containers, Kubernetes, or similar)
• Understanding of DevSecOps and integrating security into software delivery pipelines
• Knowledge of security frameworks and adversary techniques such as MITRE ATT&CK
• Ability to collaborate across stakeholder groups and influence security outcomes
• Curiosity and motivation for continuous learning
• Relevant certifications welcomed (e.g., Microsoft Security Engineer Associate, Security Operations Analyst, Cybersecurity Architect Expert)

Benefits

• Flexible working hours and hybrid model (2 days in office, 3 days remote)
• Modern office with quiet zones and ergonomic workstations
• Base salary with annual bonus structure
• Holiday allowance (2-week vacation) and occasional remote work across Poland and international options
• Employer-paid Medicover Platinum healthcare package (family upgrade available)
• MyBenefit cafeteria with monthly budget (e.g., Multisport card)
• Unum group life insurance (upgrade available)
• Medicover travel insurance for private trips and global business travel insurance
• Option to join Deutsche Börse Group Share Plan (after 1 year)
• Copyrights program for certain roles; professional training and courses
• Language classes (Polish, German, English based on needs)
• Integration events, volunteering initiatives, and employee-led clubs
• Compensation ranges disclosed at the initial candidate engagement stage