Principal Security Engineer

SimCorp; Warszawa; On-site; PLN 240,000 - 320,000; Full time

Benefits offered by this job

Flexible hours

Hybrid work

Medicover healthcare package

Multisport card

Job summary

SimCorp in Warszawa is seeking a Security Engineer to join our Platform Security team. You will be a senior technical contributor protecting our products, cloud environments, and operations from evolving cyber threats.

You will collaborate with Application, Infrastructure, Architecture, and Product Engineering teams to embed security across the SDLC, strengthen detection capabilities, and drive secure engineering practices in a hybrid work model with ongoing growth opportunities.

Qualifications

• Experience in security engineering across cloud and on-prem environments.
• Strong knowledge of cloud security technologies and threat detection.
• Proficiency in secure software development and incident response.

Responsibilities

• Lead security engineering initiatives across cloud, application, and infra security domains.
• Conduct risk evaluations and threat modelling with engineering teams.
• Develop and tune detection capabilities using security tooling and SIEMs.
• Embed security into CI/CD pipelines and IaC practices.
• Guide incident response and post-incident reviews.

Skills

Security engineering

Cloud security

Application security

Incident response

Threat modelling

SIEM technologies

Microsoft Defender

Microsoft Sentinel

KQL analytics

Terraform / IaC

Kubernetes

CI/CD security

Tools

Terraform

Kubernetes

Microsoft Defender

Azure

Job description

WHAT MAKES US, US

Join some of the most innovative thinkers in FinTech as we lead the evolution of financial technology. If you are an innovative, curious, collaborative person who embraces challenges and wants to grow, learn and pursue outcomes with our prestigious financial clients, say Hello to SimCorp! At its foundation, SimCorp is guided by our values — caring, customer success-driven, collaborative, curious, and courageous. Our people-centered organization focuses on skills development, relationship building, and client success. We take pride in cultivating an environment where all team members can grow, feel heard, valued, and empowered. If you like what we’re saying, keep reading!

WHY THIS ROLE IS IMPORTANT TO US

Security is fundamental to everything we do at SimCorp. As a Security Engineer, you will be a senior technical contributor within our Platform Security team, helping protect our products, cloud environments, platforms, and operations from evolving cyber threats. Working across cloud security, application security, detection engineering, incident response, and platform security, you will partner closely with Application, Infrastructure, Architecture, and Product Engineering teams to strengthen our overall security posture. We recognize these are broad domains, and no single individual is expected to be an expert in every area. Instead, we are looking for someone who brings strong expertise in one or more security disciplines and a passion for continuous learning. This is an opportunity to influence security strategy and execution across a global technology organization. Success in this role means delivering meaningful security improvements, strengthening our ability to detect and respond to threats, and enabling engineering teams to build secure and resilient solutions at scale.

WHAT YOU WILL BE RESPONSIBLE FOR

• Lead security engineering initiatives from planning through implementation, driving improvements across cloud, application, infrastructure, and operational security domains.
• Conduct security assessments, architecture reviews, threat modelling exercises, and risk evaluations, helping engineering teams identify and address security gaps.
• Analyze security challenges across multiple technology domains, identify root causes, and work with platform teams to design and implement sustainable solutions.
• Contribute to the development and tuning of detection capabilities using Microsoft Sentinel, Microsoft Defender, KQL analytics, and related security tooling.
• Support the definition and implementation of logging, monitoring, and event collection standards across the platform.
• Participate in incident response activities, including investigation, containment, recovery, root cause analysis, and post-incident reviews.
• Conduct proactive threat hunting activities across environments and systems within your areas of ownership.
• Develop and improve incident response playbooks, security runbooks, and operational security processes.
• Translate threat intelligence, incident findings, and emerging risks into tangible improvements to security controls, monitoring capabilities, and engineering practices.
• Identify security risks proactively and define mitigation strategies before issues can impact the business.
• Lead or contribute to secure software development lifecycle initiatives, security taskforces, architecture discussions, and cross-functional security programs.
• Collaborate with engineering teams to embed security into CI/CD pipelines, development workflows, infrastructure platforms, and cloud architectures.
• Serve as a trusted security advisor for engineers, architects, and product teams, helping guide secure decision-making.
• Communicate technical risks, security recommendations, and incident findings effectively to both technical and non-technical stakeholders, including senior leadership.

WHAT WE VALUE

• 8+ years of experience in security engineering, cloud security, application security, cyber defense, incident response, or related fields.
• Experience working within modern cloud environments, ideally including Microsoft Azure.
• Knowledge of cloud security technologies such as Microsoft Defender, Microsoft Sentinel, Entra ID, security monitoring tools, and related services.
• Familiarity with Identity and Access Management concepts and security best practices.
• Understanding of application security principles, including threat modelling, secure development practices, SAST, DAST, and software composition analysis.
• Experience with detection engineering, SIEM technologies, threat hunting activities, and operational security monitoring.
• Knowledge of incident response processes, investigation techniques, and recovery activities.
• Experience with vulnerability management, infrastructure hardening, and security risk mitigation practices.
• Familiarity with Infrastructure as Code technologies such as Terraform or Bicep.
• Experience working with cloud-native technologies, containers, Kubernetes, or similar modern platform architectures.
• Understanding of DevSecOps principles and integrating security into software delivery pipelines.
• Knowledge of security frameworks, attack methodologies, and adversary techniques such as MITRE ATT&CK.
• Ability to work across multiple stakeholder groups and influence positive security outcomes through collaboration and technical expertise.
• Curiosity and motivation to continuously learn, develop, and adapt to an evolving security landscape.
• Relevant certifications are welcomed, including Microsoft Security Engineer Associate, Security Operations Analyst, Cybersecurity Architect Expert, or similar industry-recognized certifications.

BENEFITS

• Flexible working hours and hybrid model - 2 days in the office, 3 days remote
• Modern office (next to Wilanowska metro station) with quiet zones and ergonomic workstations
• Base salary with annual bonus structure
• Holiday allowance upon a 2-week vacation
• Occasional remote work across Poland and international options available (up to 24 days domestic, 20 days international per year - subject to internal policy)
• Employer-paid Medicover Platinum healthcare package (employee-paid family upgrade available)
• MyBenefit Cafeteria with a monthly budget provided by SimCorp, which can be used to finance a Multisport card (with a 25% employee contribution) or choose other lifestyle options
• Unum group life insurance (employee-paid upgrade available)
• Medicover travel insurance for private trips and global business travel insurance
• Possibility to join Deutsche Börse Group Share Plan (eligible after 1 year)
• Copyrights program for certain roles
• Possibility to develop your career in an international environment
• Professional training and courses provided by SimCorp
• Polish language classes for foreign employees; German and English classes based on business needs
• Integration events, volunteering initiatives and employee-led clubs
• Compensation ranges are being disclosed at the initial stage of candidate engagement. Visit our career pages to learn more about working at SimCorp: www.simcorp.com/career

WHO WE ARE

For over 50 years, we have worked closely with investment and asset managers to become the world’s leading provider of integrated investment management solutions. We are 3,000+ colleagues with a broad range of nationalities, educations, professional experiences, ages, and backgrounds. SimCorp is an independent subsidiary of the Deutsche Börse Group. Following the recent merger with Axioma, we leverage the combined strength of our brands to provide an industry-leading, full, front-to-back offering for our clients. SimCorp is an equal-opportunity employer. We are committed to building a culture where diverse perspectives and expertise are integrated into our everyday work. We believe in the continual growth and development of our employees, so that we can provide best-in-class solutions to our clients. #Li-Hybrid SimCorp is a provider of industry-leading integrated investment management solutions for the global buy side. Founded in 1971, with more than 3,000 employees across five continents, SimCorp is a truly global technology leader that empowers more than half of the world’s top 100 financial companies through its integrated platform, services, and partner ecosystem. SimCorp is a subsidiary of Deutsche Börse Group. As of 2024, SimCorp includes Axioma, the leading provider of risk and management and portfolio optimization solutions for the global buy side.