Senior IT Engineer Security

Over ABN AMRO
Are you ready to be part of a mission that uses cutting-edge technology to protect our customers, employees, and the bank against cyber threats? At ABN AMRO, we work with vast amounts of data, and we are leveraging machine learning and language models to scale our detection and response capabilities. By consciously and carefully applying these technologies, we aim to stay ahead of cybercriminals who are increasingly using AI to enhance their attacks.
Jouw rol
As a Senior Security Engineer, you will play a key role in ensuring that security telemetry from diverse sources is consistently ingested, transformed, and made available for cybersecurity analytics and reporting. You’ll be part of CISO Cyber Defence, a vibrant and diverse team consisting of 145 professionals who thrive on collaboration and innovation.
Arbeidsvoorwaarden
We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

• An attractive gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by additional days off and development budgets.

Solliciteer nu via de knop hieronder en draag bij aan een veiligere digitale toekomst.
Belangrijkste verantwoordelijkheden

• Onboarding large-scale security data sources into Microsoft Sentinel and the broader cyber data platform.
• Designing and implementing ingestion-time transformations using KQL to ensure scalable and efficient processing of security telemetry.
• Working with ASIM schemas and understanding normalization requirements to ensure data consistency across security domains.
• Familiarity with Common Event Format (CEF), Syslog, and cloud-native security telemetry.
• Engineering reliable and performant data ingestion pipelines capable of handling high-volume streaming data.
• Developing Python-based automation and reusable components to support data onboarding and operational efficiency.
• Supporting the Cyber Resilience Index by ensuring security data is accurate, complete, and available for measurement and reporting.
• Building and maintaining API integrations with internal and external security tooling.
• Deploying and maintaining solutions through Azure DevOps CI/CD pipelines and adhering to SDLC practices.
• Collaborating with Security Engineers, Data Analysts, and Security Analysts to identify telemetry requirements and data quality improvements.
• Ensuring onboarding solutions comply with internal security, governance, and operational standards.

Vereisten

• Experience with Azure Cloud and Security Suite (Monitor, Log Analytics, AMA, Sentinel / XDR) - or equivalent in other cloud stack.
• Strong understanding of security telemetry onboarding and SIEM architectures.
• Strong experience developing and deploying software projects in virtualized environments at-scale (testing, CI/CD, containerization, logging frameworks and observability, SDLC and Kubernetes) in any modern language (Python preferred) for automation tasks, micro-services and large-scale data processing.
• Strong understanding of software engineering principles and design patterns.
• Querying skills (KQL, SQL, PromQL and so on) particularly for ingestion-time transformations, troubleshooting, data shaping and enrichment, large-scale log processing and performance optimization.