Senior SIEM Engineer: Threat Detection & Data Pipelines

Sii Poland; Katowice; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Medical care

Centre of internal trainings

Profit sharing

Open and accessible management team

Many experts you can learn from

Job summary

Sii Poland is seeking an experienced SIEM Engineer for a project in the energy sector. You will design, administer, and improve SIEM platforms to support threat detection, incident response, and regulatory compliance, operating within a global IT environment.

The role focuses on building data ingestion pipelines, optimizing processing, and ensuring security visibility while collaborating with cross-functional teams across identities, endpoints, networks, and cloud.

Qualifications

• Minimum 3 years of experience in SIEM engineering or security monitoring.
• Hands-on with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, Elastic, Google SecOps).
• Experience onboarding logs and troubleshooting in Windows, Linux, cloud, networks, endpoints, and apps.
• Proficiency in KQL, SPL, SQL.
• Knowledge of syslog, APIs, agents, collectors, and parsing/enrichment processes.
• Scripting or automation with PowerShell, Python, REST API, Git, CI/CD, or IaC.
• Understanding of detection engineering, incident response, digital forensics, and network security.
• English proficiency at least B2.

Responsibilities

• Designing, configuring, maintaining, and monitoring the SIEM platform and related infrastructure.
• Collecting and onboarding security logs from various sources such as identities, endpoints, networks, cloud, and business applications.
• Creating reliable data pipelines and developing parsing, normalization, transformation, and contextual enrichment processes.
• Monitoring telemetry health and troubleshooting ingestion issues.
• Supporting detection engineering with required fields, correlation logic, and threat intelligence.
• Optimizing ingestion, storage, retention, query performance, and costs while preserving security visibility.
• Maintaining architecture diagrams, log source inventory, onboarding standards, runbooks, and configuration records.
• Supporting SOC investigations, threat hunting, incident response, and audits.

Skills

SIEM engineering

SIEM platforms

KQL/SPL/SQL

Log onboarding

Windows

Linux

Cloud

Endpoints

Tools

PowerShell

Python

REST API

Git

CI/CD

Infrastructure-as-code

Job description

Sii Poland is seeking an experienced SIEM Engineer for a project in the energy sector. You will design, administer, and improve SIEM platforms to support threat detection, incident response, and regulatory compliance, operating within a global IT environment.

The role focuses on building data ingestion pipelines, optimizing processing, and ensuring security visibility while collaborating with cross-functional teams across identities, endpoints, networks, and cloud.