Cyber Defense Engineer

Innovation is and will always be the core to SAP Fioneer, and it is the promise of why we were spun out of SAP: agility, innovation, and delivery.

SAP Fioneer builds on a heritage of outstanding technology and a deep understanding of corporate and consumer demands. At the heart of it all it is simple: We bring financial services to the next level with innovative software solutions and platforms.

We are helping companies in the financial services industry to achieve speed, scalability, and cost-efficiency through digital business innovation, cloud technology, and solutions that cover banking and insurance processes end-to-end.

A global company, rapid growth, innovative people, and a lean organization make SAP Fioneer a place where you accelerate your future!

About the role

In this role, you will play a key part in strengthening our security operations by supporting incident response, enhancing detection capabilities, and driving automation across our defense activities. You will collaborate closely with IT, Privacy, and other stakeholders to improve security controls, ensure effective system hardening, and maintain compliance with key security standards and regulatory frameworks. This is a hands-on role with the opportunity to shape and continuously improve our overall security posture.

Responsibilities

Participate in the Incident Response (IR) function, investigating and responding to security incidents in a timely and effective manner

Automate IR and defense center activities by leveraging playbooks, automation rules, and scripts, ensuring consistency and efficiency across operations

Tune and develop detection rules aligned with organizational needs to maintain strong detection coverage and a high true-positive rate

Collaborate with IT and other relevant stakeholders to ensure proper hardening configurations across laptops and servers, and partner with the Privacy team on notifications to affected parties in the event of a data disclosure

Ensure ongoing compliance with relevant standards and frameworks, including ISO 27001, SOC 2, DORA, and others

3+ years of experience in defense engineering or incident response, with hands-on expertise configuring detection mechanisms

Strong understanding of cloud environments and experience with security tooling for detection and response (e.g., SIEM/XDR/EDR platforms such as Microsoft Sentinel, Defender, or equivalents). Azure knowledge is a plus.

Strong understanding of attacker methodologies, TTPs, and attack paths within cloud environments and across Windows, macOS, and Linux operating systems

Proficiency in scripting and KQL (Kusto Query Language) or similar query languages.

Working knowledge of APIs for security tooling and automation (e.g., Microsoft Graph, Defender, Purview, or equivalents)

Proficiency English language level, both written and verbal

Join forces with some of the industry's most brilliant minds in a thrilling venture to shape the ever-evolving financial landscape.

Picture an environment that offers the best of both worlds: the agility, enthusiasm, and dynamism of a startup, seamlessly blended with the tried-and-true expertise, robust market presence, and vast customer network of a well-established organization.

At SAP Fioneer, you'll thrive in a flexible work setting that not only fosters creativity but also empowers you to think beyond conventional boundaries, bringing fresh concepts to the forefront and challenging the status quo. Here, you'll become an integral part of a diverse and globally connected team that we take immense pride in – a team that's perpetually expanding and innovating.

As a member of our workforce, you'll have the opportunity to carve your own career path, all while enjoying competitive compensation packages and advancement prospects based solely on your achievements.