Cyber Security Engineer, Elastic (Security Operations)

Your mission

Security is fundamental to the trust millions of customers place in Bitpanda every day. As an Cyber Security Engineer, you'll help protect our platform by detecting threats, responding to incidents and continuously improving the security of our cloud-native environment. Working alongside experienced security engineers, you'll build detections, automate repetitive tasks and investigate security events that help keep our infrastructure, applications and customers safe.

What you'll do

• Build and improve detections. Develop, test and tune detection rules in Elastic Security (ES|QL/KQL), helping improve detection coverage, reduce false positives and ensure meaningful threats are identified quickly.
• Investigate security events and hunt for threats. Respond to security alerts, participate in incident response, perform proactive threat hunting across AWS, Elastic and Datadog, and contribute to improving investigation and response processes.
• Automate security operations. Build scripts, API integrations and SOAR workflows that reduce manual effort, improve investigation quality and help the Security team operate more efficiently.
• Help secure our cloud platform. Monitor AWS security events, investigate suspicious activity, contribute to system hardening and security tooling improvements, and support initiatives that strengthen Bitpanda's overall security posture.
• Contribute to a strong security culture. Work closely with engineers across the business, support compliance activities including ISO 27001, PCI DSS and DORA, and help promote security best practices throughout the organisation.
• Keep millions of users safe, no matter the time of day. As part of this commitment, you'll participate in a weekly rotating on-call schedule alongside the rest of the team.

Who you are

• You have 2–4 years of experience in information security, security engineering or security operations, with exposure to incident response, SIEM, threat hunting or cloud security.
• You enjoy solving technical security problems and have experience writing scripts or automating workflows using APIs or security tooling.
• You have a solid understanding of AWS or another major cloud platform, networking fundamentals, system hardening and security monitoring. Experience with Elastic Security, ES|QL or KQL is a big plus!
• You're curious, proactive and eager to learn, taking ownership of your work while seeking opportunities to improve both security and operational efficiency.
• You're passionate about keeping millions of users safe, no matter the time of day; This role has on call responsibilities that rotate through the team on a weekly basis.