Security Operations Center Engineer (Splunk)

Location: Poland or Ukraine; remote/office work

Company

hirify.global provides engineering and technology services, including cybersecurity operations and enterprise security solutions.

What you will do

• Develop, configure, and maintain Splunk and Splunk Enterprise Security content, including correlation searches, dashboards, reports, data models, and knowledge objects.
• Create, tune, and optimize SIEM detections to improve alert fidelity, expand threat coverage, and reduce false positives.
• Onboard, normalize, and validate security data sources, including field extraction, data quality, and Splunk CIM compliance.
• Investigate complex security alerts and incidents as an L2 escalation point and support L1 analysts during investigations.
• Build monitoring, incident response, performance tracking, and detection engineering dashboards and reports.
• Implement security platform integrations and use scripting, automation, SOAR, and AI-enabled technologies to improve operational workflows.

Requirements

• At least 2 years of hands-on experience in security operations, SOC/CSOC analysis, SIEM engineering, detection engineering, security engineering, or a related cybersecurity role.
• Strong practical experience with Splunk, Splunk Enterprise Security, and Splunk Search Processing Language.
• Experience creating and tuning correlation searches, alerts, dashboards, reports, notable events, and SIEM detection content.
• Knowledge of security data onboarding, normalization, field extraction, log-source coverage, data quality management, and Splunk CIM.
• Understanding of incident investigation, alert triage, Windows and Linux environments, EDR, IDS/IPS, firewalls, email security, identity services, MITRE ATT&CK, NIST CSF, and ISO 27001.
• Experience with Python, PowerShell, SOAR, automation technologies, and AI-enabled tools; English proficiency at B1/B2 level or higher.

Nice to have

• Bachelor’s degree in information technology, computer science, cybersecurity, management information systems, or a related field.
• Relevant security or Splunk certifications.

Culture & Benefits

• Work in a Cyber Security Operations Center supporting enterprise-wide security monitoring.
• Collaborate with Information Security, IT, Delivery teams, CSOC analysts, and platform support teams.
• Contribute to continuous improvement, security automation, operational documentation, and threat visibility initiatives.
• Equal opportunity employment regardless of legally protected characteristics.