FlexaFlexa
  • Discover companies
  • Find a job
  • Resources
Sign inSign up

Quick links

  • Sign in
  • Sign up
  • Book a demo
  • Live feed

For employers

  • How Flexa can help
  • Case studies
  • Talent Insights Report 2026

For users

  • Discover companies
  • Find a job
  • Resources
  • The Flexa Awards

Flexa info

  • About us
  • Contact us
  • FAQs
  • Legal
FlexaFlexa

© 2026 Flexa, All rights reserved.

  • Privacy policy
  • Terms
Discover companies
Find a job
Resources
View company profileApply now

Working at SAP

  • Company employees
    107,000

Hiring in

  • Global

Office locations

Join SAP as a Sr. AI SIEM Engineer based in Bellevue, United States. In this hands-on, senior-level role, you will own platform engineering end-to-end and lead the design of enterprise SIEM, data pipeline, and AI integration ecosystems using modern cloud and AI tools.

Requirements

  • Expert-level Microsoft Sentinel engineering skills including Analytics Rules, DCRs, Workbooks, and Playbooks deployed via Terraform or Bicep/ARM.
  • Strong CI/CD expertise using Git, Azure DevOps, or GitHub Actions.
  • Proficiency in Python, TypeScript/Node.js, or Go.
  • Experience designing and operating Cribl Stream or Edge pipelines.
  • Ability to effectively use AI tools and agentic AI in daily work.
  • Degree is not required for this role.

Skills & Responsibilities

  • Microsoft Sentinel: Engineer and optimize Microsoft Sentinel and Log Analytics workspaces across availability, performance, cost, and access control.
  • Cribl Pipelines: Build and operate Cribl pipelines to collect, transform, and route security telemetry to Sentinel, Splunk, and data lakes.
  • MCP Servers: Design and implement MCP servers that expose Sentinel and Splunk APIs with RBAC, schema validation, rate limiting, and audit trails.
  • Infrastructure as Code: Manage all SIEM, pipeline, and AI configurations as code with drift detection and compliance-as-code enforcement.
  • Potential transition routes: People from Cloud Security Engineer, DevOps Engineer, or Security Operations roles may bring relevant cloud, automation, and telemetry skills, alongside meeting the mandatory Microsoft Sentinel and IaC requirements.

Job description

Company Description

Job Description

Sr. AI SIEM EngineerWhat you'll bring

You're a senior security engineer with expert-level Microsoft Sentinel skills, a strong background in Infrastructure as Code, and deep experience in security telemetry engineering.

  • Expert-level Microsoft Sentinel engineering — Analytics Rules, DCRs, Workbooks, and Playbooks deployed as code via Terraform (azurerm) or Bicep/ARM
  • CI/CD expertise with Git, Azure DevOps, or GitHub Actions, including automated KQL rule validation and controlled environment promotion
  • Proficiency in Python and TypeScript/Node.js or Go for Microsoft Graph and Azure Monitor API integrations and MCP server development
  • Proven experience designing and operating Cribl Stream or Edge pipelines for large-scale security telemetry
  • Degree not required for this role.

We also look for people who build trust naturally, communicate with clarity, keep the customer at the centre of what they do, and bring emotional intelligence and genuine problem-solving ability to the challenges they face.

In addition to the required skills and experience for this role, all candidates at SAP must be able to use AI tools. This includes agentic AI. Candidates should feel comfortable using these tools in their daily work. They need to know how to create effective inputs, automate routine tasks, evaluate the quality of AI outputs, and encourage AI practices within their teams.

What you'll build

You will own Sentinel platform engineering end-to-end and lead the design of SAP's enterprise SIEM, data pipeline, and AI integration ecosystem.

  • Engineer and optimise Microsoft Sentinel and Log Analytics workspaces across availability, performance, cost, and access control
  • Build and operate Cribl pipelines to collect, transform, and route security telemetry to Sentinel, Splunk, and data lakes
  • Design and implement MCP servers that expose Sentinel and Splunk APIs with RBAC, schema validation, rate limiting, and full audit trails
  • Manage all SIEM, pipeline, and AI configurations as code, with drift detection and compliance-as-code enforcement
  • Integrate AI and MCP capabilities with SOC co-pilots for detection triage, alert investigation, and response workflows

Where you belong

SAP Global Security & Cloud Compliance protects SAP's enterprise environment and ensures compliance with global security standards. The SIEM engineering function builds the telemetry and detection infrastructure the SOC depends on, working at the intersection of cloud security, AI, and platform engineering. This is a hands-on ownership role in a modern, AI-enabled Sentinel environment at enterprise scale.

Equal Employment Opportunity (EEO) Statement

Our company does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Qualifications

Additional Information

All your information will be kept confidential according to EEO guidelines.

About SAP
With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency
SAP believes pay transparency is essential to fostering an honest, supportive, and inclusive culture and is an important part of our commitment to pay equity. The salary range for this position is included in the job posting. The actual compensation offered to the successful candidate will fall within that range and will depend on factors such as education, skills, experience, location, and scope of the role, as determined through the selection process. Where applicable, SAP may also provide variable incentive opportunities and additional benefits, subject to the terms of the relevant plans and policies. Any variable incentive amount is target-based, with actual payouts dependent on company and individual performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.

Apply now
SAP

Sr. AI SIEM Engineer

Bellevue
Salary range provided in posting based on qualifications.

Similar jobs

SAP

Principal AI Developer, Industry AI

Palo Alto
198,200 - 420,000 USD / year
SAP

Senior AI Engineer - GenAI CI/CD Tooling

Sofia
SAP

Forward Deployed AI Engineer

New York
USD 90,000 - USD 198,500 per year
SAP

Forward Deployed Senior AI Engineer

New York
131,000 - 271,600 USD (Annual combined range)
SAP

Forward Deployed AI Engineer Expert / Senior

Munich
SAP

Forward Deployed Senior AI Engineer

Singapore