Inżynier ds. Cyberbezpieczeństwa (K/M)

About the Position

Inżynier ds. Cyberbezpieczeństwa (K/M)

Location: Katowice

We are seeking a Cybersecurity Engineer to join our team in Katowice, responsible for implementing, developing, and maintaining SIEM and SOAR systems based on technologies like SecureVisio, Splunk, CrowdStrike, and Wazuh. The role involves building and automating threat detection processes, integrating log sources, optimizing security environments, and supporting SOC teams in incident response.

Responsibilities

• Implementing, configuring, and developing SIEM/SOAR systems, particularly SecureVisio, Splunk, Wazuh, and integration with CrowdStrike.
• Designing and developing detection use cases, correlation rules, and alerts in SIEM systems.
• Creating and refining SOAR automation playbooks, including incident mapping, responses, and workflows.
• Integrating security systems with various log sources and IT/OT tools.
• Analyzing security incidents, supporting SOC L1/L2, and participating in Threat Hunting activities.
• Monitoring and optimizing the performance and architecture of SIEM/SOAR platforms.
• Creating dashboards, reports, and security data visualizations.
• Collaborating with technical and business teams on integration, incident response, and IT/OT security environment deployment.
• Contributing to the development of SOC and Cyber Defense operational processes, including technical documentation (HLD/LLD).
• Proposing improvements to enhance the organization's security level and detection quality.

Requirements

• Minimum 1–2 years of experience in cybersecurity (SOC, SIEM, SOAR, security engineering).
• Practical knowledge of at least one SIEM/SOAR system: Splunk, Wazuh, SecureVisio, CrowdStrike Falcon.
• Knowledge of log analysis, event correlation, response automation, network security, and EDR/XDR solutions.
• Familiarity with Linux and Windows operating systems and TCP/IP protocols.
• Ability to work with security data (structured and unstructured logs).
• Analytical thinking, independence, and ability to work with multiple teams.
• English language proficiency (min. B2).

Nice to Have

• Certifications: Splunk, CEH, BTL1, CompTIA CySA+, CompTIA CASP+ or equivalent.
• Experience in cloud environments (Azure, AWS, Microsoft 365).
• Experience with Threat Intelligence, Threat Hunting, and EDR/XDR tools and areas.

We Offer

• Work in a stable and dynamically developing company.
• Employment contract.
• Flexible working hours.
• Professional development opportunities.
• Subsidies for private medical care, additional insurance, and sports passes (Medicover).
• Internal and external training.
• Real impact on implemented projects.
• Parking for cars near the workplace.
• Bicycle parking on company premises.
• Team-building meetings.
• Fruity Tuesdays.
• Friendly work atmosphere.

Apply now!