CyberSecurity Service & L&M Specialist

Aricoma; Warszawa; On-site; PLN 110,000 - 165,000; Full time

Benefits offered by this job

On-site in Warsaw

HO relocation possibility

Job summary

Aricoma is seeking a CyberSecurity Logging & Monitoring Service Specialist to support the DIG/CSS CyberSecurity Service. You will focus on security monitoring operations, threat detection engineering, monitoring architecture design, and ongoing enhancement of Splunk and Cribl-based services.

The role is Warsaw-based, on-site with HO possibility, and involves onboarding security logs, creating dashboards and reports, and contributing to SecOps and threat modelling activities.

Qualifications

• Experience with enterprise-scale security environments.
• Ability to translate security requirements into monitoring controls.
• Proven track record in building and maintaining security monitoring architectures.

Responsibilities

• Perform health checks and optimize Splunk/Cribl monitoring platforms.
• Manage security log onboarding, normalization, and integration.
• Develop and fine-tune Splunk ES detection and correlation rules.

Skills

Threat detection engineering

Monitoring operations

Security monitoring

Security controls

Communication

Tools

Splunk Enterprise

Splunk ES

Cribl

SOAR

Job description

We are looking for a CyberSecurity Logging & Monitoring Service Specialist (CLMSS) to support the DIG/CSS CyberSecurity Service.

The consultant will be responsible for maintaining, improving, and further developing the company's cybersecurity logging and monitoring capability.

The role focuses on security monitoring operations, threat detection engineering, monitoring architecture design, and continuous enhancement of Splunk and Cribl-based security monitoring services.

📍Warsaw - on-site with HO possibility

• perform health checks and optimize Splunk/Cribl monitoring platforms
• manage security log onboarding, normalization, and integration
• develop and fine-tune Splunk ES detection and correlation rules
• translate cybersecurity policies into effective monitoring use cases
• apply MITRE ATT&CK and MITRE D3FEND frameworks
• contribute to security monitoring architecture, HLDs, LLDs, and technical designs
• create technical documentation, playbooks, dashboards, and KPI reports
• support SecOps and threat modelling activities
• improve cybersecurity monitoring and detection capabilities
• extensive cybersecurity monitoring & logging experience
• ability to translate security requirements into monitoring controls
• experience in enterprise-scale security environments
• Cybersecurity logging & monitoring
• Splunk security monitoring
• Security event analysis & detection engineering
• Monitoring architecture & SecOps
• Technical documentation & reporting
• Secure SDLC & security controls
• MITRE ATT&CK / D3FEND
• Splunk Enterprise, ES, SOAR, UBA & Cribl
• Detection engineering & SOAR playbooks
• Security monitoring architecture (HLD/LLD)