Security Operations Engineer

Capco is a fully independent, global management and technology consultancy serving Finance and Energy markets for 25 years. The company combines business consulting, digital transformation, and technology services, focusing on reducing costs, managing risks and regulatory changes, and increasing revenues.

• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Proven track record in creating, tuning, and testing detection rules.
• Proficiency in scripting and automation using Python, PowerShell, Bash, or similar.
• Strong English communication skills with ability to lead stakeholder workshops.
• Understanding of cloud environments (Azure, AWS), operating systems (Windows, Linux), and database environments (SQL, Oracle).
• Ability to work independently in a dynamic, high-volume onboarding environment.

Nice to have:

• Experience in threat modelling and defining threat profiles.
• Familiarity with DORA or other regulatory frameworks in financial services.

Key Responsibilities:

• Design, build, and optimize SIEM detection rules with a focus on Microsoft Sentinel.
• Develop and execute test cases for detection logic; automate validation processes using scripting.
• Support onboarding of critical applications into the security monitoring ecosystem.
• Collaborate with application teams to define logging requirements and detection use cases.
• Lead and moderate workshops with stakeholders to align on threat scenarios and security capabilities.
• Produce clear and comprehensive documentation covering detection logic, threat models, and validation results.
• Work closely with SOC, engineering, and red teams to enhance alert fidelity and incident response effectiveness.
• Contribute to threat verification and ensure deliverables meet ALaM program and DORA milestones.

We are looking for a Poland based candidate.

We have been informed of several recruitment scams targeting the public. We strongly advise you to verify identities before engaging in recruitment related communication. All official Capco communication will be conducted via a Capco recruiter.