Sr. AI SIEM Engineer

Sr. AI SIEM EngineerWhat you'll bring

You're a senior security engineer with expert-level Microsoft Sentinel skills, a strong background in Infrastructure as Code, and deep experience in security telemetry engineering.

• Expert-level Microsoft Sentinel engineering — Analytics Rules, DCRs, Workbooks, and Playbooks deployed as code via Terraform (azurerm) or Bicep/ARM
• CI/CD expertise with Git, Azure DevOps, or GitHub Actions, including automated KQL rule validation and controlled environment promotion
• Proficiency in Python and TypeScript/Node.js or Go for Microsoft Graph and Azure Monitor API integrations and MCP server development
• Proven experience designing and operating Cribl Stream or Edge pipelines for large-scale security telemetry
• Degree not required for this role.

We also look for people who build trust naturally, communicate with clarity, keep the customer at the centre of what they do, and bring emotional intelligence and genuine problem-solving ability to the challenges they face.

In addition to the required skills and experience for this role, all candidates at SAP must be able to use AI tools. This includes agentic AI. Candidates should feel comfortable using these tools in their daily work. They need to know how to create effective inputs, automate routine tasks, evaluate the quality of AI outputs, and encourage AI practices within their teams.

What you'll build

You will own Sentinel platform engineering end-to-end and lead the design of SAP's enterprise SIEM, data pipeline, and AI integration ecosystem.

• Engineer and optimise Microsoft Sentinel and Log Analytics workspaces across availability, performance, cost, and access control
• Build and operate Cribl pipelines to collect, transform, and route security telemetry to Sentinel, Splunk, and data lakes
• Design and implement MCP servers that expose Sentinel and Splunk APIs with RBAC, schema validation, rate limiting, and full audit trails
• Manage all SIEM, pipeline, and AI configurations as code, with drift detection and compliance-as-code enforcement
• Integrate AI and MCP capabilities with SOC co-pilots for detection triage, alert investigation, and response workflows

Where you belong

SAP Global Security & Cloud Compliance protects SAP's enterprise environment and ensures compliance with global security standards. The SIEM engineering function builds the telemetry and detection infrastructure the SOC depends on, working at the intersection of cloud security, AI, and platform engineering. This is a hands-on ownership role in a modern, AI-enabled Sentinel environment at enterprise scale.

Equal Employment Opportunity (EEO) Statement

Our company does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

All your information will be kept confidential according to EEO guidelines.

About SAP
With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency
SAP believes pay transparency is essential to fostering an honest, supportive, and inclusive culture and is an important part of our commitment to pay equity. The salary range for this position is included in the job posting. The actual compensation offered to the successful candidate will fall within that range and will depend on factors such as education, skills, experience, location, and scope of the role, as determined through the selection process. Where applicable, SAP may also provide variable incentive opportunities and additional benefits, subject to the terms of the relevant plans and policies. Any variable incentive amount is target-based, with actual payouts dependent on company and individual performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.