Threat Modeling & Detection Engineer — SIEM & Automation

Hitachi, Ltd.; Poland; On-site; PLN 110,000 - 140,000; Full time

Job summary

Hitachi Energy in Krakow, Poland invites a Security Engineer specializing in Threat Modeling and Detection Engineering to strengthen our cybersecurity operations. You will design detection capabilities, onboard data sources, and drive automation to improve the effectiveness of the SOC.

In this role, you will implement detection rules within SIEM, build ingestion pipelines, and apply threat intelligence to enhance monitoring across endpoints, cloud, and networks.

Qualifications

• 2–3 years of experience in detection engineering or security operations.
• Experience writing and tuning SIEM detection rules and developing actionable detection content.
• Knowledge in Python, KQL, SQL, or similar technologies used for security monitoring and automation.
• Understanding of log sources across endpoint, identity, network, cloud, and infrastructure environments.
• Experience with Microsoft Sentinel, Defender Suite, Azure, AWS, Docker, Linux, or similar security technologies is an advantage.
• Familiarity with threat modeling, MITRE ATT&CK, log ingestion pipelines, and security automation practices.

Responsibilities

• Design, develop, and tune detection rules within the SIEM to improve threat visibility.
• Onboard new log sources by building ingestion pipelines, normalizing data, and ensuring high-quality integration into the SIEM.
• Perform threat modeling of systems and log sources to identify detection requirements and security gaps.
• Build and maintain automation solutions that improve SOC workflows, reporting, and operational efficiency.
• Collaborate with cybersecurity and engineering teams to continuously enhance detection coverage against evolving threats.
• Apply threat intelligence and frameworks such as MITRE ATT&CK to strengthen monitoring and response capabilities.
• Contribute to detection-as-code practices and CI/CD‑driven security operations processes.
• Support continuous improvement of security monitoring, alert quality, and overall cyber defense effectiveness.

Skills

Python

KQL

SQL

Threat modeling

MITRE ATT&CK

Log sources

Tools

Microsoft Sentinel

Defender Suite

Azure

AWS

Docker

Linux

Job description

Hitachi Energy in Krakow, Poland invites a Security Engineer specializing in Threat Modeling and Detection Engineering to strengthen our cybersecurity operations. You will design detection capabilities, onboard data sources, and drive automation to improve the effectiveness of the SOC.

In this role, you will implement detection rules within SIEM, build ingestion pipelines, and apply threat intelligence to enhance monitoring across endpoints, cloud, and networks.