Senior Cyber Security Engineer, Elastic (Security Operations) at Bitpanda

At a glance

Company
Bitpanda
Location
Austria
Work arrangement
On-site
Employment type
Full-time
Experience
2–5 years
Working hours
40 hours
Visa sponsorship
Offered, according to the listing
Posted
Added to The Stack

Apply for this role at Bitpanda

About the role

Responsibilities:
- Own detection engineering for Elastic Security: design, implement and maintain high-fidelity detections (ES|QL/KQL) mapped to real-world attacker techniques.
- Lead incident response and complex investigations; run threat-hunting across AWS, Elastic and Datadog telemetry.
- Build automated investigation, enrichment and response workflows using SOAR, APIs and custom tooling to reduce manual effort.
- Improve cloud security monitoring, system hardening and security tooling across the AWS environment.
- Partner with engineering teams to remediate risks, embed security into development and support compliance (ISO 27001, PCI DSS, DORA).
- Mentor security engineers, raise detection maturity and promote security best practices across the organisation.

Requirements:
- 4+ years of hands-on security engineering or SOC experience with incident response and detection engineering.
- Practical experience with Elastic Security (ES|QL/KQL), SIEM concepts and detection tuning to reduce noise and increase fidelity.
- Strong knowledge of AWS security, Datadog observability and cloud-native telemetry sources.
- Experience building automation and playbooks with SOAR, APIs and scripting (Python, Bash, etc.).
- Background in threat hunting, digital forensics and root-cause investigations.
- Familiarity with system hardening, IAM, network security and compliance frameworks (ISO 27001, PCI DSS, DORA).
- Strong collaboration, mentoring skills and ability to drive cross-team security initiatives.

Responsibilities

You will lead detection engineering, incident response, and threat hunting efforts to protect digital assets and infrastructure. Additionally, you will design automated security workflows and partner with engineering teams to harden systems and ensure compliance.

Requirements

The role requires at least 4 years of hands-on security engineering experience with expertise in incident response, SIEM, and cloud-native environments like AWS. Candidates should be proficient in detection engineering, automation, and possess strong collaborative and mentoring skills.

Key skills

  • Cyber security — in 2 other listings on The Stack
  • Incident response — in 59 other listings on The Stack
  • Threat hunting — in 5 other listings on The Stack
  • SIEM — in 19 other listings on The Stack
  • Digital forensics — not in any other listing on The Stack
  • Detection engineering — in 6 other listings on The Stack
  • Elastic Security — not in any other listing on The Stack
  • AWS — in 760 other listings on The Stack
  • Automation
  • SOAR
  • System hardening
  • Network security
  • IAM
  • Security monitoring
  • Scripting
  • Cloud security

On The Stack (as of 2026-10-31)

Frequently asked questions about Bitpanda

Is this Senior Cyber Security Engineer, Elastic (Security Operations) role still open?

It was posted on 2026-10-27 and is listed as active on The Stack. Confirm on Bitpanda's application page before applying.

Does Bitpanda offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Bitpanda's site.

Where is this role located?

The listing gives the location as Austria. It is marked on-site.

What skills does this role ask for?

The listing names: Cyber security, Incident response, Threat hunting, SIEM, Digital forensics, Detection engineering, Elastic Security, AWS, Automation, SOAR, System hardening, Network security, IAM, Security monitoring, Scripting, Cloud security.

All roles at Bitpanda

FOR BOTS & AI AGENTS

Machine-readable versions of this job and The Stack. The Stack is a weekly tech careers newsletter for 55,000+ engineers and a free board of visa-sponsored tech jobs in Europe. Fetch these instead of parsing this page.

This job (.md) · llms.txt · llms-full.txt · ai.txt · All jobs (.md) · Companies (.md) · MCP server · Endpoint index · API docs · Developer docs · Newsletter