Principal Security Engineer

SimCorp; Województwo mazowieckie; On-site; PLN 120,000 - 180,000; Full time

Job summary

SimCorp, a leading FinTech provider, is seeking a Security Engineer to join our Platform Security team. You will be a senior technical contributor responsible for protecting our products, cloud environments, platforms, and operations from evolving cyber threats.

You will collaborate across Engineering, Platform, Product, Architecture, and Security to lead security initiatives, conduct assessments, threat modelling, incident response, threat hunting, and build secure CI/CD practices that empower

Responsibilities

• Lead security engineering initiatives from planning through implementation, driving improvements across cloud, application, infrastructure, and operational security domains.
• Conduct security assessments, architecture reviews, threat modelling exercises, and risk evaluations, helping engineering teams identify and address security gaps.
• Analyze security challenges across multiple technology domains, identify root causes, and work with platform teams to design and implement sustainable solutions.
• Contribute to the development and tuning of detection capabilities using Microsoft Sentinel, Microsoft Defender, KQL analytics, and related security tooling.
• Support the definition and implementation of logging, monitoring, and event collection standards across the platform.
• Participate in incident response activities, including investigation, containment, recovery, root cause analysis, and post-incident reviews.
• Conduct proactive threat hunting activities across environments and systems within your areas of ownership.
• Develop and improve incident response playbooks, security runbooks, and operational security processes.
• Translate threat intelligence, incident findings, and emerging risks into tangible improvements to security controls, monitoring capabilities, and engineering practices.
• Identify security risks proactively and define mitigation strategies before issues can impact the business.
• Lead or contribute to secure software development lifecycle initiatives, security taskforces, architecture discussions, and cross‑functional security programs.
• Collaborate with engineering teams to embed security into CI/CD pipelines, development workflows, infrastructure platforms, and cloud architectures.
• Serve as a trusted security advisor for engineers, architects, and product teams, helping guide secure decision‑making.
• Communicate technical risks, security recommendations, and incident findings effectively to both technical and non‑technical stakeholders, including senior leadership.

Job description

WHAT MAKES US, US

Join some of the most innovative thinkers in FinTech as we lead the evolution of financial technology. If you are an innovative, curious, collaborative person who embraces challenges and wants to grow, learn and pursue outcomes with our prestigious financial clients, say Hello to SimCorp!

At its foundation, SimCorp is guided by our values — caring, customer success-driven, collaborative, curious, and courageous. Our people-centered organization focuses on skills development, relationship building, and client success. We take pride in cultivating an environment where all team members can grow, feel heard, valued, and empowered.

WHY THIS ROLE IS IMPORTANT TO US

Security is fundamental to everything we do at SimCorp. As a Security Engineer, you will be a senior technical contributor within our Platform Security team, helping protect our products, cloud environments, platforms, and operations from evolving cyber threats.

Working across cloud security, application security, detection engineering, incident response, and platform security, you will partner closely with Application, Infrastructure, Architecture, and Product Engineering teams to strengthen our overall security posture. We recognize these are broad domains, and no single individual is expected to be an expert in every area. Instead, we are looking for someone who brings strong expertise in one or more security disciplines and a passion for continuous learning.

This is an opportunity to influence security strategy and execution across a global technology organization. Success in this role means delivering meaningful security improvements, strengthening our ability to detect and respond to threats, and enabling engineering teams to build secure and resilient solutions at scale.

WHAT YOU WILL BE RESPONSIBLE FOR

In your daily work, you will collaborate with teams across Engineering, Platform, Product, Architecture, and Security to:

• Lead security engineering initiatives from planning through implementation, driving improvements across cloud, application, infrastructure, and operational security domains.
• Conduct security assessments, architecture reviews, threat modelling exercises, and risk evaluations, helping engineering teams identify and address security gaps.
• Analyze security challenges across multiple technology domains, identify root causes, and work with platform teams to design and implement sustainable solutions.
• Contribute to the development and tuning of detection capabilities using Microsoft Sentinel, Microsoft Defender, KQL analytics, and related security tooling.
• Support the definition and implementation of logging, monitoring, and event collection standards across the platform.
• Participate in incident response activities, including investigation, containment, recovery, root cause analysis, and post-incident reviews.
• Conduct proactive threat hunting activities across environments and systems within your areas of ownership.
• Develop and improve incident response playbooks, security runbooks, and operational security processes.
• Translate threat intelligence, incident findings, and emerging risks into tangible improvements to security controls, monitoring capabilities, and engineering practices.
• Identify security risks proactively and define mitigation strategies before issues can impact the business.
• Lead or contribute to secure software development lifecycle initiatives, security taskforces, architecture discussions, and cross‑functional security programs.
• Collaborate with engineering teams to embed security into CI/CD pipelines, development workflows, infrastructure platforms, and cloud architectures.
• Serve as a trusted security advisor for engineers, architects, and product teams, helping guide secure decision‑making.
• Communicate technical risks, security recommendations, and incident findings effectively to both technical and non‑technical stakeholders, including senior leadership.

WHO WE ARE

For over 50 years, we have worked closely with investment and asset managers to become the world’s leading provider of integrated investment management solutions. We are 3,000+ colleagues with a broad range of nationalities, educations, professional experiences, ages, and backgrounds. SimCorp is an independent subsidiary of the Deutsche Börse Group. Following the recent merger with Axioma, we leverage the combined strength of our brands to provide an industry‑leading, full, front‑to‑back offering for our clients.