Senior Security Engineer – Incident Response (SIRT)

About the role

We are looking for a Senior Security Engineer to join our Security Incident Response Team (SIRT) in Germany. You will work in a globally distributed cybersecurity group protecting large‑scale cloud environments and critical platforms from evolving threats.

Key responsibilities

• Lead end‑to‑end response for high‑severity security incidents, from detection to recovery.
• Investigate complex events across AWS and Google Cloud using advanced DFIR methods.
• Coordinate incident communications and provide updates to technical and executive stakeholders.
• Design and improve detection strategies, including SIEM use cases, telemetry pipelines, and alerting mechanisms.
• Develop automation and AI‑assisted workflows to accelerate investigations.
• Partner with threat intelligence to contextualize emerging threats.
• Conduct root‑cause analyses and lead post‑incident reviews.
• Create and maintain runbooks, playbooks, and incident response procedures.
• Mentor team members and contribute to the maturity of incident response operations.

Required profile

• Significant experience in security incident response, digital forensics, and investigations in cloud‑first environments.
• Hands‑on expertise with AWS and/or Google Cloud Platform security operations.
• Strong experience with SIEM platforms, EDR solutions, and detection engineering.
• Solid understanding of threat intelligence frameworks and MITRE ATT&CK.
• Experience developing automation using Python or SOAR platforms.
• Interest or practical experience applying AI/ML to security operations.

Required skills

• AWS
• Google Cloud Platform
• SIEM
• EDR
• Python
• SOAR
• AI / Machine Learning
• MITRE ATT&CK