Senior IT Engineer Security

Details

ABN AMRO is looking for a Senior Security Engineer to help scale detection and response capabilities through advanced cybersecurity, data engineering, machine learning, and language-model solutions. The role focuses on designing, building, and deploying solutions that protect customers, employees, and the bank against cyber threats.

Responsibilities

• Onboard large-scale security data sources into Microsoft Sentinel and the broader cyber data platform.
• Design and implement ingestion-time transformations using KQL for scalable and efficient security telemetry processing.
• Work with ASIM schemas and normalization requirements to ensure data consistency across security domains.
• Use Common Event Format (CEF), Syslog, and cloud-native security telemetry.
• Engineer reliable and performant data ingestion pipelines for high-volume streaming data.
• Develop Python-based automation and reusable components to support data onboarding and operational efficiency.
• Support the Cyber Resilience Index by ensuring security data is accurate, complete, and available for measurement and reporting.
• Build and maintain API integrations with internal and external security tooling.
• Deploy and maintain solutions through Azure DevOps CI/CD pipelines while adhering to SDLC practices.
• Collaborate with Security Engineers, Data Analysts, and Security Analysts to identify telemetry requirements and improve data quality.
• Ensure onboarding solutions comply with internal security, governance, and operational standards.
• Support the Product Owner and team during refinement and planning sessions.
• Mentor and coach junior team members.

Requirements

• Experience with Azure Cloud and the Azure Security Suite, including Monitor, Log Analytics, AMA, Sentinel, and/or XDR, or equivalent experience with another cloud stack.
• Strong understanding of security telemetry onboarding and SIEM architectures.
• Strong experience developing and deploying software projects in virtualized environments at scale, including testing, CI/CD, containerization, logging frameworks, observability, SDLC practices, and Kubernetes.
• Experience with a modern programming language, preferably Python, for automation tasks, microservices, and large-scale data processing.
• Strong understanding of software engineering principles and design patterns.
• Querying skills using KQL, SQL, PromQL, or similar technologies, particularly for ingestion-time transformations, troubleshooting, data shaping and enrichment, large-scale log processing, and performance optimization.
• Strong consultancy, communication, collaboration, and problem-solving skills.
• Ability to manage multiple concurrent projects and priorities.

Nice to Have

• Experience with Event Hub, Event Grid, and event-driven architectures.
• Knowledge of cybersecurity operations and SOC processes.
• Experience with performance and cost optimization for large-scale log ingestion platforms.

Working Environment

You will join CISO Cyber Defence, a diverse team of 145 professionals within an organization of more than 450 cybersecurity employees. The team works in an agile environment focused on collaboration, innovation, and continuous learning.

Benefits

• Gross monthly salary of €6,066 to €8,666 based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• Excellent pension scheme.
• Hybrid working, with working from home possible in consultation with the team and depending on the role.
• Ergonomic home office setup.
• Five weeks of vacation per year, two mandatory days off, and the option to purchase up to four additional weeks of vacation annually.
• Five additional “Banking for better days” for personal development or volunteer work.
• Annual development budget of €1,000, accumulable up to €3,000.
• Annual public transport pass providing free public transportation throughout the Netherlands for business and private use.
• Employment conditions covered by the applicable Collective Labour Agreement (CLA).