Security Operations Engineer - SIEM & App Onboarding

Capco; United States; Remote; USD 31,000 - 46,000; Full time

Job summary

Capco Poland is seeking a Security Operations Engineer to support onboarding of critical applications into enhanced monitoring capabilities. You will help build and optimize SIEM detection, support threat verification, and ensure alignment with DORA requirements by 2026.

You will work at the intersection of SIEM engineering, threat modelling, and security operations, contributing to improved detection accuracy and stronger security posture across projects.

Qualifications

• Hands-on SIEM experience, preferably Microsoft Sentinel.
• Proven ability to design, tune, and test detection rules.
• Proficient in Python, PowerShell, Bash or similar for automation.
• Strong English communication; capable of leading stakeholder workshops.
• Knowledge of cloud platforms (Azure, AWS) and OS/database environments.
• Able to work independently in high-volume onboarding workflows.

Responsibilities

• Design, build, and optimize SIEM detection rules.
• Develop and run tests for detection logic; automate validation.
• Onboard critical applications into the security monitoring ecosystem.
• Gather logging requirements and define detection use cases.
• Lead stakeholder workshops on threat scenarios and security capabilities.
• Create technical documentation covering detection logic, threat models, and validation results.
• Collaborate with SOC, engineering, and red teams to improve alert fidelity.

Skills

SIEM expertise

Detection engineering

Scripting & automation

Communication

Cloud & OS knowledge

Autonomy

Tools

Microsoft Sentinel

KQL

Python

PowerShell

Bash

Azure

AWS

SQL

Oracle

Job description

Capco Poland is seeking a Security Operations Engineer to support onboarding of critical applications into enhanced monitoring capabilities. You will help build and optimize SIEM detection, support threat verification, and ensure alignment with DORA requirements by 2026.

You will work at the intersection of SIEM engineering, threat modelling, and security operations, contributing to improved detection accuracy and stronger security posture across projects.