SIEM Administrator / Engineer

14.4k - 28.4k PLN14 400 - 28 400 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

MidZdalnie·WarszawaFull-time·Umowa o pracę

#471315·Dodano 4 dni temu·1

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Cybersecurity SIEMMicrosoft SentinelSplunk ESIBM QRadarElastic SecuritysyslogCEFAPI

Podsumowanie oferty

Administer and enhance a SIEM platform for a project providing cybersecurity and digital services to international organizations. The work supports centralized security monitoring, threat detection, and cyber defense operations in a multi-tenant environment.

Wymagania

5+ years of experience in IT or cybersecurity, including 3+ years administering an enterprise SIEM in production.
Hands-on experience with at least one major SIEM: Microsoft Sentinel, Splunk ES, IBM QRadar, or Elastic Security.
Hands-on experience onboarding, parsing, and normalizing log sources using Syslog, CEF, Windows Event Forwarding (WEF), and API-based cloud connectors.
Experience writing detection content in the platform's query language (KQL, SPL, AQL, or equivalent).
Understanding of MITRE ATT&CK for mapping detection coverage.
Clean professional records.
English at Upper-Intermediate level or above.

Nice to have:

Vendor certifications, such as Microsoft SC-200, Splunk Certified Admin/Architect, or IBM QRadar certifications.
SOAR experience with Sentinel Logic Apps, Splunk SOAR, or Cortex XSOAR.
Multi-tenant SIEM or MSSP experience.
Scripting and automation experience with Python or PowerShell, and experience with Infrastructure as Code.
Experience with detection-as-code practices, including Sigma and Git-based rule management.

Obowiązki

Administer, maintain, and upgrade the SIEM platform, including its health, performance, capacity, and licensing.
Onboard and normalize new log sources, including network, endpoint, cloud, identity, and application sources in multi-tenant setups.
Develop, tune, and maintain detection rules, correlation searches, dashboards, and reports.
Reduce false positives with SOC analysts and implement new use cases.
Build and maintain SOAR playbooks and integrations.
Maintain documentation, data retention policies, and access control.
Support audits and compliance reporting.

Benefity

Opportunity to earn up to an additional 1,000 EUR per month, depending on expertise, through participation in company activities; this is included in the annual bonus.
Access to the corporate training portal and its regularly updated knowledge base.
Compensation for certifications, such as AWS and PMP.
Referral program.
Private health insurance and sports compensation, depending on employment type.
Company events and refreshments, including parties, pizza days, fruit, coffee, and snacks.

Premie

Dofinansowanie szkoleń

Spotkania integracyjne

Opieka zdrowotna

Ubezpieczenie

Napoje w biurze

Darmowe przekąski

Andersen

30 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz