🛡️CyberSecurity Service & L&M Specialist

We are looking for a CyberSecurity Logging & Monitoring Service Specialist (CLMSS) to support the DIG/CSS CyberSecurity Service.

The consultant will be responsible for maintaining, improving, and further developing the company's cybersecurity logging and monitoring capability.

The role focuses on security monitoring operations, threat detection engineering, monitoring architecture design, and continuous enhancement of Splunk and Cribl-based security monitoring services.

📍Warsaw - on-site with HO possibility

📌Key responsibilities

• perform health checks and optimize Splunk/Cribl monitoring platforms
• manage security log onboarding, normalization, and integration
• develop and fine-tune Splunk ES detection and correlation rules
• translate cybersecurity policies into effective monitoring use cases
• apply MITRE ATT&CK and MITRE D3FEND frameworks
• contribute to security monitoring architecture, HLDs, LLDs, and technical designs
• create technical documentation, playbooks, dashboards, and KPI reports
• support SecOps and threat modelling activities
• improve cybersecurity monitoring and detection capabilities

👤Required profile & Qualifications

• extensive cybersecurity monitoring & logging experience
• strong Splunk expertise
• ability to translate security requirements into monitoring controls
• strong analytical, troubleshooting & documentation skills
• experience in enterprise-scale security environments

🧑 💻"must have" Technical knowledge

• Cybersecurity logging & monitoring
• Splunk security monitoring
• Security event analysis & detection engineering
• Monitoring architecture & SecOps
• Technical documentation & reporting
• English B2+

➕Desirable:

• Secure SDLC & security controls
• Windows/Linux & network security
• MITRE ATT&CK / D3FEND
• Splunk Enterprise, ES, SOAR, UBA & Cribl
• Detection engineering & SOAR playbooks
• IaC, CI/CD & Azure DevOps
• Security monitoring architecture (HLD/LLD)