FlexaFlexa
  • Discover companies
  • Find a job
  • Resources
Sign inSign up

Quick links

  • Sign in
  • Sign up
  • Book a demo
  • Live feed

For employers

  • How Flexa can help
  • Case studies
  • Talent Insights Report 2026

For users

  • Discover companies
  • Find a job
  • Resources
  • The Flexa Awards

Flexa info

  • About us
  • Contact us
  • FAQs
  • Legal
FlexaFlexa

© 2026 Flexa, All rights reserved.

  • Privacy policy
  • Terms
Discover companies
Find a job
Resources
View company profileApply now

Working at SAP

  • Company employees
    107,000

Hiring in

  • Global

Office locations

Join SAP as a Sr. AI SIEM Engineer in Bellevue, United States. Own the Microsoft Sentinel platform and lead the design of enterprise SIEM, data pipelines, and AI integration ecosystems in a hands-on, modern, AI-enabled cloud security environment.

Requirements

  • Hands-on Microsoft Sentinel and enterprise SIEM engineering experience, including deployment, administration, and advanced KQL.
  • Strong Infrastructure as Code and CI/CD expertise using Terraform, Bicep/ARM, Git, and Azure DevOps/GitHub/Jenkins.
  • Proficiency in Python, TypeScript/Node.js or Go, with experience in AI engineering and API-driven automation.
  • Experience designing and operating Cribl Stream or Edge pipelines.
  • Degree not required; relevant certifications (SC-200, AZ-500, AZ-104, Cribl Certified Admin) are an advantage.

Skills & Responsibilities

  • Microsoft Sentinel: Engineer and optimise Microsoft Sentinel and Log Analytics workspaces across availability, performance, cost, and access control.
  • Cribl Pipelines: Build and operate Cribl pipelines to collect, transform, and route security telemetry to Sentinel, Splunk, and data lakes.
  • MCP Servers: Design and implement MCP servers that expose Sentinel and Splunk APIs with RBAC, schema validation, rate limiting, and full audit trails.
  • Configuration as Code: Manage all SIEM, pipeline, and AI configurations as code, with drift detection and compliance-as-code enforcement.
  • AI Integration: Integrate AI and MCP capabilities with SOC co-pilots for detection triage, alert investigation, and response workflows.
  • Potential transition routes: People from Cloud Security Engineer or DevOps Engineer roles may bring strong automation and infrastructure skills, alongside meeting mandatory SIEM and security requirements.

Job description

Company Description

Job Description

What you'll bring

You're a senior security engineer with expert-level Microsoft Sentinel skills, a strong background in Infrastructure as Code, and deep experience in security telemetry engineering.

  • Hands-on Microsoft Sentinel and enterprise SIEM engineering experience, including deployment, administration, monitoring, incident management, detection engineering, and advanced KQL
  • Strong Infrastructure as Code and CI/CD expertise using Terraform, Bicep/ARM, Git, and Azure DevOps/GitHub/Jenkins to deliver secure, version-controlled Sentinel and Azure environments
  • Experience in automation and AI engineering, with proficiency in Python and TypeScript/Node.js or Go, and hands-on experience developing AI solutions, MCP integrations, API-driven automation, and process optimisation
  • Proven experience designing and operating Cribl Stream or Edge pipelines for large-scale security telemetry
  • Degree not required for this role.
  • Relevant certifications are an advantage — Microsoft SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer), AZ-104, or Cribl Certified Admin.

We also look for people who build trust naturally, communicate with clarity, keep the customer at the centre of what they do, and bring emotional intelligence and genuine problem-solving ability to the challenges they face.

In addition to the skills and experience needed for this role, all positions at SAP require candidates to be comfortable using AI tools. This includes using agentic AI for daily tasks such as creating effective inputs, automating routine tasks, and judging the quality of AI-generated outputs. Candidates should also promote the use of AI practices within their teams.

What you'll build

You will own Sentinel platform engineering end-to-end and lead the design of SAP's enterprise SIEM, data pipeline, and AI integration ecosystem.

  • Engineer and optimise Microsoft Sentinel and Log Analytics workspaces across availability, performance, cost, and access control
  • Build and operate Cribl pipelines to collect, transform, and route security telemetry to Sentinel, Splunk, and data lakes
  • Design and implement MCP servers that expose Sentinel and Splunk APIs with RBAC, schema validation, rate limiting, and full audit trails
  • Manage all SIEM, pipeline, and AI configurations as code, with drift detection and compliance-as-code enforcement
  • Integrate AI and MCP capabilities with SOC co-pilots for detection triage, alert investigation, and response workflows
Apply now
SAP

Sr. AI SIEM Engineer

Bellevue
Competitive salary range determined by experience and location.

Where you belong

SAP Global Security & Cloud Compliance protects SAP's enterprise environment and ensures compliance with global security standards. The SIEM engineering function builds the telemetry and detection infrastructure the SOC depends on, working at the intersection of cloud security, AI, and platform engineering. This is a hands-on ownership role in a modern, AI-enabled Sentinel environment at enterprise scale.

Equal Employment Opportunity (EEO) Statement

Our company does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Qualifications

Additional Information

All your information will be kept confidential according to EEO guidelines.

About SAP
With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency
SAP believes pay transparency is essential to fostering an honest, supportive, and inclusive culture and is an important part of our commitment to pay equity. The salary range for this position is included in the job posting. The actual compensation offered to the successful candidate will fall within that range and will depend on factors such as education, skills, experience, location, and scope of the role, as determined through the selection process. Where applicable, SAP may also provide variable incentive opportunities and additional benefits, subject to the terms of the relevant plans and policies. Any variable incentive amount is target-based, with actual payouts dependent on company and individual performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.

Similar jobs

SAP

Principal AI Developer, Industry AI

Palo Alto
198,200 - 420,000 USD / year
SAP

Senior SOC Engineer

Eschborn
SAP

Senior Platform Engineer - Edge Integration Cell

Sofia
BAE Systems

Software Engineer – Shared Infrastructure

New Malden
Up to £54,500
SAP

Platform Engineer for SAP Business AI Platform - Unified Customer Landscape

Sofia
SAP

Security AI Automation Engineer

Bangalore