Cyber Security Engineer — Threat Hunting & Incident Response (Hybrid)

Bitpanda; Wien; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Stock options

OpenUP mental wellbeing program

Udemy online courses

Job summary

Bitpanda is seeking a Cyber Security Engineer to protect our platform by detecting threats, responding to incidents and improving our cloud‑native security landscape. You’ll work with experienced engineers to build detections, automate tasks and investigate security events across our infrastructure and customers.

You will also collaborate with teams worldwide to strengthen security posture, support ISO 27001, PCI DSS and DORA compliance, and participate in a weekly on‑call rotation.

Qualifications

• 2–4 years of experience in information security, security engineering or security operations.
• Experience scripting or automating workflows via APIs or security tooling.
• Solid understanding of AWS or another major cloud platform.
• Experience with Elastic Security, ES|QL or KQL is a big plus.
• Curious, proactive and eager to learn, taking ownership of your work.
• On-call responsibilities rotate weekly with the team.

Responsibilities

• Build and tune detection rules in Elastic Security to improve coverage.
• Investigate security events and perform threat hunting across AWS, Elastic and Datadog.
• Automate security operations with scripts and API integrations; create SOAR workflows.
• Monitor AWS security events and contribute to system hardening and tooling improvements.
• Support compliance activities (ISO 27001, PCI DSS, DORA) and security best practices.
• Participate in a weekly rotating on-call schedule.

Skills

Incident response

Threat hunting

Security monitoring

Automation via APIs

AWS knowledge

Elastic Security (ES/QL/KQL)

On-call readiness

Team collaboration

Tools

Elastic Security

AWS

Datadog

SOAR

KQL/ES|QL

Job description

Bitpanda is seeking a Cyber Security Engineer to protect our platform by detecting threats, responding to incidents and improving our cloud‑native security landscape. You’ll work with experienced engineers to build detections, automate tasks and investigate security events across our infrastructure and customers.

You will also collaborate with teams worldwide to strengthen security posture, support ISO 27001, PCI DSS and DORA compliance, and participate in a weekly on‑call rotation.