Senior Detection Engineer (SIEM/SOAR) — Remote & Flexible

S-PRO; Polska; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Flexible schedule

Remote work model

Medical insurance

Paid vacations

Paid Sick-leaves

Paid State holidays

Job summary

S-PRO is seeking an experienced SIEM/SOAR and detection engineering specialist to help further develop our existing SIEM setup. You will review and optimize the current configuration, analyze data sources, and enhance detection logic to reduce false positives.

You will work closely with cross-functional teams, apply MITRE ATT&CK mappings, and drive improvements across SOC processes. German language proficiency is required for collaboration with European clients, and remote work options are

Qualifications

• Substantial hands-on experience with SIEM and detection engineering.
• Experience with SOC processes and incident triage.
• Experience with SOAR and security automation.
• Strong knowledge of security data sources and integrations (identity, cloud, SaaS).
• Detection engineering based on MITRE ATT&CK.
• Experience with versioned, traceable maintenance of detections.
• Hands-on mindset and ability to work independently.
• Fluent in German.

Responsibilities

• Review and critical evaluation of the existing SIEM setup.
• Analysis of connected data sources and identification of gaps.
• Analysis of existing detection rules, use cases, and cases.
• Establishment of a baseline for case volume, processing effort, and false positives.
• Identification of causes for high manual analysis effort.
• Improvement of detection logic, prioritization, and case quality.
• Design and implementation of additional data enrichment.
• Identification and implementation of meaningful integrations.
• Development or further development.

Skills

SIEM

SOAR

Detection engineering

MITRE ATT&CK

Sekoia

Incident triage

Automation

Data sources integration

German language

Tools

Sekoia platform

Detection-as-Code

SIEM tooling

SOAR tooling

Job description

S-PRO is seeking an experienced SIEM/SOAR and detection engineering specialist to help further develop our existing SIEM setup. You will review and optimize the current configuration, analyze data sources, and enhance detection logic to reduce false positives.

You will work closely with cross-functional teams, apply MITRE ATT&CK mappings, and drive improvements across SOC processes. German language proficiency is required for collaboration with European clients, and remote work options are