Cyber Defense Engineer

SAP Fioneer

. Participate in the Incident Response (IR) function, investigating and responding to security incidents in a timely and effective manner .

Posted 9/19/2026full-timeRemote • RomaniaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Incident Response and defense engineering, with a strong focus on automating security processes and ensuring compliance with standards such as ISO 27001 and SOC 2. Proficient in configuring detection mechanisms and collaborating with cross-functional teams to enhance security posture.

Highest-signal resume keywords

Incident ResponseDetection Mechanisms ConfigurationCloud Security ToolingScripting and KQL ProficiencyCompliance with ISO 27001 and SOC 2

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseDetection Mechanisms ConfigurationCloud Security ToolingScriptingKQL (Kusto Query Language)APIs for Security ToolingAutomation RulesDetection Rules DevelopmentSecurity Posture ImprovementAttacker Methodologies

Soft Skills

CollaborationCommunication

Tools & Technologies

SIEMXDREDRMicrosoft SentinelMicrosoft DefenderMicrosoft GraphMicrosoft Purview

Industry Keywords

ISO 27001SOC 2DORACloud EnvironmentsWindowsMacOSLinux

Tech Stack

Tools & technologies

AzureCloudLinuxMacOS

About the role

Key responsibilities & impact

Participate in the Incident Response (IR) function, investigating and responding to security incidents in a timely and effective manner
Automate IR and defense center activities using playbooks, automation rules, and scripts
Tune and develop detection rules aligned with organizational needs to maintain strong detection coverage and a high true-positive rate
Collaborate with IT and stakeholders to ensure proper hardening configurations across laptops and servers
Partner with the Privacy team on notifications to affected parties in the event of a data disclosure
Ensure ongoing compliance with ISO 27001, SOC 2, DORA, and other relevant standards and frameworks
Support the security operations function and continuously improve the organization’s overall security posture

Requirements

What you’ll need

3+ years of experience in defense engineering or incident response, with hands-on expertise configuring detection mechanisms
Strong understanding of cloud environments and experience with security tooling for detection and response (e.g., SIEM/XDR/EDR platforms such as Microsoft Sentinel, Defender, or equivalents). Azure knowledge is a plus.
Strong understanding of attacker methodologies, TTPs, and attack paths within cloud environments and across Windows, macOS, and Linux operating systems
Proficiency in scripting and KQL (Kusto Query Language) or similar query languages.
Working knowledge of APIs for security tooling and automation (e.g., Microsoft Graph, Defender, Purview, or equivalents)
Proficiency English language level, both written and verbal

Benefits

Comp & perks

Flexible work setting
Diverse and globally connected team
Competitive compensation packages
Career advancement prospects based on achievements