CyberSecurity Logging & Monitoring (L&M) Service Specialist | Warsaw

Hiring via TechTree

This is a role that TechTree is recruiting for on behalf of one of its clients.

TechTree is an AI-driven recruitment platform working with high-growth companies.

When you apply, TechTree's AI Agent matches you not just to this role , but to other relevant opportunities across its network, so one application can unlock multiple roles.

CyberSecurity Logging & Monitoring (L&M) Service Specialist | Warsaw

TechTree's client is hiring a CyberSecurity Logging & Monitoring Service Specialist for a long-term security programme supporting a major EU agency in Warsaw.

This is a senior, hands-on opportunity combining SIEM engineering, security architecture, detection engineering, threat hunting, and offensive security within a highly regulated environment.

• Location: Warsaw, Poland
• Work model: On-site engagement
• Employment: Contract
• Contract duration: Initial 12 months, extendable up to 48 months
• Estimated compensation: PLN 174,000–300,000 annually
• Level: Mid-Senior,
• Travel: None expected

What you'll do

• Administer and architect Splunk Enterprise, Splunk ES, Splunk SOAR, Splunk UBA, and Cribl Stream
• Design and maintain enterprise logging and monitoring architecture
• Produce HLD/LLD documentation, security policies, and procedures
• Build and improve detection rules and threat-hunting capabilities
• Map security coverage against MITRE ATT&CK and D3FEND
• Use penetration testing and red-team findings to strengthen blue-team detection
• Support incident triage and security monitoring operations
• Deploy and manage security infrastructure through Azure DevOps, CI/CD, and Infrastructure-as-Code
• Prepare business cases and MSSP/vendor evaluations
• Present security roadmaps and recommendations to senior stakeholders

What we're looking for

• 10+ years of overall IT experience
• 8+ years in security monitoring, SIEM, or a closely related role
• Deep hands-on expertise with Splunk and Cribl Stream
• Strong detection engineering, threat hunting, and incident-triage experience
• Experience across both offensive and defensive security
• Knowledge of MITRE ATT&CK and D3FEND
• Experience producing security architecture documentation
• Bachelor's degree or higher
• English at B2+ level
• At least 3 of the following certifications or recognised equivalents: CISSP, CCSP, GPEN, Splunk Enterprise Certified Admin, Splunk Enterprise Security Certified Admin, TOGAF 9 Certified
• Eligibility to obtain and hold CONFIDENTIEL UE / EU CONFIDENTIAL security clearance from day one
• Ability to work in Warsaw

Strong advantages

• Azure DevOps experience
• Infrastructure-as-Code for security platforms
• Business-case development
• MSSP and vendor evaluations
• Executive-level security communication

If this sounds like a fit, we'd love to hear from you. Apply today!