Cybersecurity L&M Engineer - 80% Remote

The Whiteam; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

The Whiteam is seeking a CyberSecurity L&M Service Specialist for Warsaw with 20% on-site and 80% remote engagement on the Frontex contract. The role focuses on Logging and Monitoring using Splunk and Cribl, SecOps, and Threat Modelling, with a strong emphasis on secure SDLC and threat detection.

You will work on on-site Frontex HQ in Warsaw with 48-month duration, require CISSP/TOGAF and other security certs, and contribute to enterprise security architecture, incident response, and security

Qualifications

• CISSP or an equivalent certification.
• TOGAF 9 or an equivalent certification.
• GIAC Penetration Tester (GPEN) or an equivalent certification.
• Splunk Enterprise Certified Admin and Splunk Enterprise Security Certified Admin.
• At least TOGAF 9 Certified; verification of international credentials.

Responsibilities

• Secure SDLC practices and integration of security controls across software development.
• Analyze Windows and Linux OS security, logs, and event telemetry.
• Design and implement security monitoring using Splunk and Cribl in enterprise environment.
• Develop detection logic and correlation searches aligned to MITRE ATT&CK & D3FEND.

Skills

Splunk

Cribl Stream

SecOps

Threat Modelling

MITRE ATT&CK

D3FEND

IaC

Azure DevOps

Scripting

Threat Hunting

Education

Level 6

Tools

Splunk Enterprise

Splunk Enterprise Security

Splunk SOAR

Splunk UBA

Cribl Stream

Job description

The Whiteam is seeking a CyberSecurity L&M Service Specialist for Warsaw with 20% on-site and 80% remote engagement on the Frontex contract. The role focuses on Logging and Monitoring using Splunk and Cribl, SecOps, and Threat Modelling, with a strong emphasis on secure SDLC and threat detection.

You will work on on-site Frontex HQ in Warsaw with 48-month duration, require CISSP/TOGAF and other security certs, and contribute to enterprise security architecture, incident response, and security