Security Engineer - Threat Modeling & SIEM Detection

Hitachi Energy; Kraków; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Home office equipment allowance

Wellness programs

Employee events

Job summary

Hitachi Energy is seeking a Security Engineer specializing in Threat Modeling and Detection Engineering to strengthen our security operations in Kraków. You will design and enhance detection capabilities, onboard data sources, and drive automation to improve SOC effectiveness.

This maternity coverage role (12 months) involves MITRE ATT&CK, SIEM tuning with Microsoft Sentinel, and cross-functional collaboration to advance monitoring and security automation.

Qualifications

• 2-3 years in detection engineering or SOC roles.
• Experience writing and tuning SIEM detection rules.
• Knowledge of Python, KQL, SQL for security monitoring and automation.
• Understanding of log sources across endpoints, identity, network, cloud, and infrastructure.

Responsibilities

• Design, develop, and tune SIEM detection rules to improve threat visibility and reduce false positives.
• Onboard log sources by building ingestion pipelines and normalizing data for the SIEM.
• Perform threat modeling of systems and log sources to identify detection gaps.
• Build and maintain automation to improve SOC workflows and reporting.
• Collaborate with cybersecurity and engineering teams to enhance detection coverage.

Skills

Detection engineering

Security operations

Python

KQL

SQL

Threat modeling

MITRE ATT&CK

Tools

Microsoft Sentinel

Defender Suite

Azure

AWS

Docker

Linux

Job description

Hitachi Energy is seeking a Security Engineer specializing in Threat Modeling and Detection Engineering to strengthen our security operations in Kraków. You will design and enhance detection capabilities, onboard data sources, and drive automation to improve SOC effectiveness.

This maternity coverage role (12 months) involves MITRE ATT&CK, SIEM tuning with Microsoft Sentinel, and cross-functional collaboration to advance monitoring and security automation.