3 months ago
Warsaw, PolandSenior
Responsibilities
- Design, build, and optimize SIEM detection rules with a focus on Microsoft Sentinel.
- Develop and execute detection-logic test cases and automate validation processes using scripting.
- Support onboarding of critical applications into the security monitoring ecosystem.
- Collaborate with application teams to define logging requirements and detection use cases.
- Lead and moderate stakeholder workshops covering threat scenarios and security capabilities.
- Document detection logic, threat models, and validation results.
- Work with SOC, engineering, and red teams to improve alert fidelity and incident response effectiveness.
- Contribute to threat verification and ensure deliverables meet ALaM program and DORA milestones.
Requirements
- Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
- Proven experience creating, tuning, and testing detection rules.
- Proficiency in Python, PowerShell, Bash, or similar scripting for automation.
- Strong English communication skills and the ability to lead stakeholder workshops.
- Understanding of Azure, AWS, Windows, Linux, SQL, and Oracle environments.
- Ability to work independently in a dynamic, high-volume application onboarding environment.
- Experience in threat modelling and defining threat profiles is preferred.
- Familiarity with DORA or other financial-services regulatory frameworks is preferred.
- Candidate must be based in Poland.
Benefits
- Flexible collaboration model
- B2B contract
- Remote work opportunity
- Opportunity to work on diverse projects
- Role is for Poland-based candidates
About Capco
Capco is a global technology and management consultancy focused on financial services, helping banks, capital markets, insurance, and wealth firms with digital transformation, risk and compliance, and data/AI-enabled modernization. Founded in 1998 and headquartered in London, it operates as a Wipro company. Its business model centers on project-based consulting, managed services, and solution delivery across strategy, engineering, and platforms for regulated institutions.