Threat Modeling Analyst: SIEM & Cloud Security Expert

HCL Technologies Limited; Polska; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Life insurance

Private medical care

MultiSport Card

Language course subsidy

Performance bonuses

Job summary

HCLTech in Poland is seeking a security professional to drive Threat Modeling initiatives across cloud and on-prem environments. The role requires hands-on SIEM experience and the ability to lead workshops with stakeholders.

You’ll work with Azure/AWS, Windows and Linux stacks, use KQL and scripting to automate tests, and collaborate with engineering teams to strengthen detections and response capabilities. Fluency in English is essential.

Qualifications

• Hands-on SIEM experience with strong preference for Microsoft Sentinel.
• Experience in detection engineering, rule creation, and rule testing.
• Ability to automate testing and validation with Python, PowerShell, or Bash.
• Strong English communication, able to lead and moderate workshops.
• Familiarity with cloud platforms (Azure/AWS), OS (Windows/Linux), and databases.

Responsibilities

• Lead Threat Modeling initiatives across cloud and on-prem environments.
• Develop and tune detection rules; validate and test detections.
• Collaborate with engineering teams to strengthen detections and response.
• Convey findings clearly in workshops and documentation.

Skills

Threat Modeling

SIEM

Microsoft Sentinel

Azure

AWS

Scripting

Python

PowerShell

KQL

Git

Terraform

Tools

Git

Terraform

Job description

HCLTech in Poland is seeking a security professional to drive Threat Modeling initiatives across cloud and on-prem environments. The role requires hands-on SIEM experience and the ability to lead workshops with stakeholders.

You’ll work with Azure/AWS, Windows and Linux stacks, use KQL and scripting to automate tests, and collaborate with engineering teams to strengthen detections and response capabilities. Fluency in English is essential.