Azure Security Orchestration Engineer (Automation & SIEM)

Bayer AG; Warszawa; Hybrid; PLN 156,000 - 187,000; Full time

Benefits offered by this job

Home office allowance

Flexible benefits

Life insurance

Disability insurance

Pension plans

Hybrid work model

Medical care above statutory

Job summary

Bayer AG in Warsaw is seeking a Security Monitoring Platform Developer to build Azure-native security automation applications. You will implement pipelines, connectors, and complex incident handling within Microsoft Sentinel and ADX, aligning with IaaC deployment and RBAC standards.

The role requires strong Python and Azure skills, a university degree in CS/IT/Cyber Security, and collaboration across global teams. Hybrid work and competitive benefits apply.

Qualifications

• Hands-on Python development including Azure Functions, async processing, and API integrations.
• Proficient with Azure Functions, Logic Apps, Service Bus, Key Vault, Event Hub, and Application Insights.
• Strong REST/JSON understanding and data serialization (STIX, MISP).
• Experience with SQL databases and data pipelines (Azure SQL, ADX).
• CI/CD via GitHub Actions; IaC with Terraform and GitHub repos.
• IT security/SIEM knowledge and threat intelligence concepts.
• Understanding of IT/enterprise systems and data flows.
• Collaborative in global teams; strong English communication; German a plus.

Responsibilities

• Develop and maintain CheckMail automation pipeline: Azure Functions, Logic Apps, ADX persistence, and Sentinel incident creation.
• Implement MISP2Sentinel connector using PyMISP and MISP-STIX libraries.
• Develop SQL-based data replication pipelines between Azure SQL, ADX, and Sentinel for context data.
• Design complex Sentinel incident handling with enrichment workflows and ServiceNow integration.
• Integrate external security APIs and threat intel feeds with robust error handling.
• Contribute to IaC deployment via GitHub Actions and Terraform; adhere to RBAC models.
• Ensure observability through App Insights and proactive alerting; maintain documentation.

Skills

Python development

Azure Functions

Azure PaaS services

REST APIs / JSON

SQL data pipelines

GitHub Actions / IaaC (Terraform)

Security / SIEM concepts

Enterprise IT knowledge

English communication

Education

University degree in CS / IT / Cyber Security

Tools

Azure Functions

Logic Apps

Service Bus

Key Vault

Event Hub

Application Insights

PyMISP / MISP-STIX

SQL / ADX

GitHub Actions / Terraform

Job description

Bayer AG in Warsaw is seeking a Security Monitoring Platform Developer to build Azure-native security automation applications. You will implement pipelines, connectors, and complex incident handling within Microsoft Sentinel and ADX, aligning with IaaC deployment and RBAC standards.

The role requires strong Python and Azure skills, a university degree in CS/IT/Cyber Security, and collaboration across global teams. Hybrid work and competitive benefits apply.