Security Engineer - Detection Engineering and Threat Modeling

Job description

Location: Krakow, Lesser Poland, Poland Job ID: R0135385 Date Posted: 2026-07-07 Company Name: HITACHI ENERGY SERVICES SP. Z O.O. Profession (Job Category): IT, Telecom & Internet Job Schedule: Full time Remote: No Job Description: The Opportunity Join Hitachi Energy as a Security Engineer specializing in Threat Modeling and Detection Engineering, and play a critical role in strengthening our cybersecurity operations. In this position, you will help design and enhance detection capabilities, onboard and secure new data sources, and drive automation that improves the effectiveness and efficiency of the Security Operations Center (SOC). Working at the intersection of threat detection, systems engineering, and cybersecurity, you will contribute to protecting critical infrastructure and enabling a proactive, intelligence-driven approach to cyber defense. How You Will Make an Impact Design, develop, and tune detection rules within the SIEM to improve threat visibility and reduce false positives Onboard new log sources by building ingestion pipelines, normalizing data, and ensuring high-quality integration into the SIEM Perform threat modeling of systems and log sources to identify detection requirements and security gaps Build and maintain automation solutions that improve SOC workflows, reporting, and operational efficiency Collaborate with cybersecurity and engineering teams to continuously enhance detection coverage against evolving threats Apply threat intelligence and frameworks such as MITRE ATT&CK to strengthen monitoring and response capabilities Contribute to detection-as-code practices and CI/CD-driven security operations processes Support continuous improvement of security monitoring, alert quality, and overall cyber defense effectiveness Your Background 2–3 years of experience in detection engineering, security operations, or related cybersecurity engineering roles Experience writing and tuning SIEM detection rules and developing actionable detection content Knowledge in Python, KQL, SQL, or similar technologies used for security monitoring and automation Understanding of log sources across endpoint, identity, network, cloud, and infrastructure environments Experience with Microsoft Sentinel, Defender Suite, Azure, AWS, Docker, Linux, or similar security technologies is an advantage Familiarity with threat modeling, MITRE ATT&CK, log ingestion pipelines, and security automation practices NOTE: this is maternity coverage - 12 months contract More about us We pride ourselves on offering a holistic range of competitive benefits to support your financial, physical and mental wellbeing and personal development. We want you to truly thrive with us, in work and out. We can provide more information during the recruitment process. We are committed to full transparency and compliance with all legal requirements, ensuring that every candidate knows exactly what to expect at each stage of the recruitment process. Once the process is successfully completed, we will share detailed information about financial conditions and benefits with the selected candidate. Before signing the employment contract, you will receive all remaining details of the offer, giving you the time and space to review everything carefully. Applicable only for Poland location align with local law regulations. Accessibility and reasonable accommodation Qualified individuals with a disability may request a reasonable accommodation if you are unable or limited in your ability to use or access the Hitachi Energy career site as a result of your disability. You may request reasonable accommodations by completing a general inquiry form on our website. Please include your contact information and specific details about your required accommodation to support you during the job application process. This is solely for job seekers with disabilities requiring accessibility assistance or an accommodation in the job application process. Messages left for other purposes will not receive a response. Use of Al and automated tools in recruitment As part of our recruitment process, Hitachi Energy uses digital and automated tools, including Al-supported solutions, to assist with activities such as application screening, job matching, and interview scheduling. These tools are designed to support our recruiters and do not replace human decision-making. Candidate data is processed in accordance with applicable data protection and employment laws as well as Hitachi's Global Data Privacy Notice. Background Screening and Security Checks As part of the hiring process, Hitachi Energy conducts pre-employment background checks that may include verification of employment history, education, criminal records, and other relevant information, in accordance with applicable laws. For certain roles—particularly those involving access to sensitive information, financial responsibilities, client data, regulated environments, or security-sensitive functions—additional or more comprehensive background or security screenings may be required. These may include, but are not limited to, enhanced criminal history checks, credit history reviews (where legally permissible), sanctions screening, or other due diligence measures aligned with the responsibilities of the position. The scope and depth of any background or security review will be determined based on the nature of the role and business necessity, and will always be conducted in compliance with applicable federal, state, and local laws. Candidates will be notified and, where required, asked to provide consent prior to the initiation of any such checks.