Threat Hunting & Detection Engineer - IT Security

IntelligenzIT; Polska; On-site; PLN 150,000 - 230,000; Full time

Job summary

IntelligenzIT in Poland is seeking an IT Security Specialist with hands-on experience in threat modeling, threat hunting, and detection engineering. You will contribute to the design and operation of SOC/SIEM capabilities and develop KQL queries for Microsoft Sentinel.

The role requires scripting basics, Git version control, and familiarity with IaC tools; Terraform experience is highly preferred.

Qualifications

• Proven experience in threat modeling and detection engineering.
• Hands-on SOC/SIEM operations and threat hunting.
• Strong knowledge of KQL and Microsoft Sentinel.

Responsibilities

• Design and implement threat modeling and detection rules.
• Operate SOC/SIEM and tune detection using KQL for Microsoft Sentinel.
• Conduct proactive threat hunting and incident containment.
• Collaborate with teams and maintain IaC pipelines using Terraform.

Skills

Threat Modeling

SOC/SIEM

Detection Engineering

KQL development

Microsoft Sentinel

Threat Hunting

Scripting

Git / source control

Infrastructure as Code

Tools

Terraform

Git

Job description

🛡️ Now Hiring: IT Security Specialist | Threat Hunting & Detection Engineering | Poland

We’re looking for an experienced IT Security Specialist with strong expertise in Threat Modeling, Detection Engineering, SOC/SIEM, and Threat Hunting.

• Strong experience in Threat Modeling
• SOC / SIEM experience
• Detection Engineering and creation/tuning of SIEM detection rules
• KQL development with Microsoft Sentinel
• Hands-on Threat Hunting experience
• Basic coding/scripting skills
• Experience with Git / source control repositories
• Exposure to Infrastructure as Code (IaC)
• Terraform experience is highly preferred

⭐ Nice to Have:

• Application Threat Analyst background
• Experience combining application security with SOC/SIEM operations

Candidates with an Application Threat Analyst background can also be considered, provided they have solid SOC/SIEM exposure and meet the core threat modeling, detection engineering, KQL, and threat hunting requirements.

📩 DM me on LinkedIn to explore this opportunity.