Senior Cybersecurity & SIEM Specialist | SOC & Detection

SEIDOR; Warszawa; On-site; PLN 180,000 - 260,000; Full time

Job summary

SEIDOR in Warsaw seeks a CyberSecurity L&M Service Specialist with 6+ years of security experience. You will develop monitoring standards, design SIEM use cases, and lead detection engineering across Windows/Linux, cloud and on-prem environments.

The role emphasizes risk assessment, incident response, and collaboration with stakeholders to improve security operations and documentation. Join a team delivering proactive security services.

Qualifications

• 6+ years of experience in cybersecurity and security operations.
• Secure SDLC; Windows/Linux and network security; enterprise controls and telemetry.
• MITRE ATT&CK and D3FEND familiarity; secure scripting and CI/CD practices.

Responsibilities

• Logging and monitoring: develop and maintain dashboards, KPIs, reports, and monitoring architectures.
• SIEM engineering: integrate log sources, normalize data, optimize components and licensing, perform health checks.
• Detection engineering: design and test monitoring use cases and correlation rules aligned with MITRE ATT&CK.
• Security operations: configure, secure, maintain, and upgrade cybersecurity systems; implement controls.
• Risk and incident response: assess risks, remediate audit findings, provide forensic analysis, support incident handlers.
• New-system onboarding: identify logs, recommend tools, develop detection rules.
• Reporting and documentation: deliver SOC reports, track remediation, maintain security playbooks.
• Stakeholder collaboration: coordinate monitoring design with customers, system owners, and security teams.

Skills

6+ years experience

Security expertise

MITRE ATT&CK

D3FEND

CI/CD Azure DevOps

Cribl Stream

Splunk Enterprise

SOAR

UBA

Architecture & documentation

Vendor evaluation

Stakeholder management

Threat hunting

Incident response

Education

CISSP

CCSP

GPEN

Splunk Enterprise Admin

Splunk Enterprise Security Admin

TOGAF 9

Equivalent credentials

Tools

Cribl Stream

Splunk Enterprise

Enterprise Security

SOAR

UBA

Azure DevOps

Job description

SEIDOR in Warsaw seeks a CyberSecurity L&M Service Specialist with 6+ years of security experience. You will develop monitoring standards, design SIEM use cases, and lead detection engineering across Windows/Linux, cloud and on-prem environments.

The role emphasizes risk assessment, incident response, and collaboration with stakeholders to improve security operations and documentation. Join a team delivering proactive security services.