Security Monitoring & Threat Detection Engineer

Aricoma; Warszawa; On-site; PLN 110,000 - 165,000; Full time

Benefits offered by this job

On-site in Warsaw

HO relocation possibility

Job summary

Aricoma is seeking a CyberSecurity Logging & Monitoring Service Specialist to support the DIG/CSS CyberSecurity Service. You will focus on security monitoring operations, threat detection engineering, monitoring architecture design, and ongoing enhancement of Splunk and Cribl-based services.

The role is Warsaw-based, on-site with HO possibility, and involves onboarding security logs, creating dashboards and reports, and contributing to SecOps and threat modelling activities.

Qualifications

• Experience with enterprise-scale security environments.
• Ability to translate security requirements into monitoring controls.
• Proven track record in building and maintaining security monitoring architectures.

Responsibilities

• Perform health checks and optimize Splunk/Cribl monitoring platforms.
• Manage security log onboarding, normalization, and integration.
• Develop and fine-tune Splunk ES detection and correlation rules.

Skills

Threat detection engineering

Monitoring operations

Security monitoring

Security controls

Communication

Tools

Splunk Enterprise

Splunk ES

Cribl

SOAR

Job description

Aricoma is seeking a CyberSecurity Logging & Monitoring Service Specialist to support the DIG/CSS CyberSecurity Service. You will focus on security monitoring operations, threat detection engineering, monitoring architecture design, and ongoing enhancement of Splunk and Cribl-based services.

The role is Warsaw-based, on-site with HO possibility, and involves onboarding security logs, creating dashboards and reports, and contributing to SecOps and threat modelling activities.