Design, build, and optimize SIEM detection rules (primarily Microsoft Sentinel); develop and automate detection validation; onboard critical applications; gather logging requirements; lead stakeholder workshops; produce detection and threat-model documentation; collaborate with SOC, engineering, and red teams; and support DORA-aligned compliance and threat verification.
CAPCO POLAND
*We are looking for Poland based candidate.
Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter.
We are seeking a highly skilled Security Operations Engineer to support the expansion of a strategic security program focused on onboarding critical applications into enhanced monitoring capabilities.In this role, you will play a key part in building and optimizing SIEM detection capabilities, supporting threat verification, and enabling regulatory alignment with DORA (Digital Operational Resilience Act) requirements by the end of 2026. You will work at the intersection of SIEM engineering, threat modelling, and security operations, contributing directly to improving detection accuracy and strengthening overall security posture.
Key Responsibilities:
- Detection Engineering: Design, build, and optimize SIEM detection rules (with a focus on Microsoft Sentinel)
- Testing & Automation: Develop and execute test cases for detection logic; automate validation processes using scripting
- Application Onboarding: Support onboarding of critical applications into the security monitoring ecosystem
- Requirements Gathering: Collaborate with application teams to define logging requirements and detection use cases
- Workshop Facilitation: Lead and moderate workshops with stakeholders to align on threat scenarios and security capabilities
- Technical Documentation: Produce clear and comprehensive documentation covering detection logic, threat models, and validation results
- Collaboration: Work closely with SOC, engineering, and red teams to enhance alert fidelity and incident response effectiveness
- Compliance Delivery: Contribute to threat verification and ensure deliverables meet ALaM program and DORA milestones
Required Skills and Experience:
- SIEM Expertise: Hands-on experience with SIEM platforms (strong preference for Microsoft Sentinel)
- Detection Engineering: Proven track record in creating, tuning, and testing detection rules
- Scripting & Automation: Proficiency in Python, PowerShell, Bash, or similar for automation use cases
- Communication: Strong English communication skills with the ability to confidently lead stakeholder workshops
- Technical Knowledge: Understanding of cloud (Azure, AWS), operating systems (Windows, Linux), and database environments (SQL, Oracle)
- Autonomy: Ability to work independently in a dynamic, high-volume onboarding environment
- SIEM & Security: Microsoft Sentinel
- Cloud & Infrastructure: Azure, AWS, Windows, Linux, SQL, Oracle
- Scripting & Automation: KQL, Python, PowerShell, Bash
Nice to have:
- Experience in threat modelling and defining threat profiles
- Familiarity with DORA or other regulatory frameworks in financial services
We have been informed of several recruitment scams targeting the public. We strongly advise you to verify identities before engaging in recruitment related communication. All official Capco communication will be conducted via a Capco recruiter.
We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects.
#LI-REMOTE
Capco New York, New York, USA Office
Inside the Empire State Building in the heart of NYC is where you will find our office. Near all public transportation it is a commuters dream.
Similar Jobs at Capco
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Design, develop, validate and deploy time series forecasting and predictive models using Python. Build scalable solutions on Azure ML and Databricks, support R-based models, implement MLOps and CI/CD for model deployment and monitoring, create analytical datasets, ensure data quality, and communicate results to technical and business stakeholders within Agile teams.
Top Skills:
Azure Machine LearningCaretCi/CdDatabricksGeospatial AnalyticsGgplot2GitMlopsPythonRRandomforestRstudioShinyTidyr)Tidyverse (DplyrTime Series ForecastingXgboost
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Analyze, validate and reconcile capital markets data; build and maintain reports and dashboards from Murex data; translate business requirements into reporting solutions; collaborate with Front Office, Risk, Finance and Ops; perform testing and data quality assurance while learning Murex reporting and data models.
Top Skills:
ExcelPower BISQLTableau
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Lead end-to-end testing for large-scale insurance transformation programmes: define test strategies, plans, KPIs and risk-based approaches; coordinate execution, defect management, environment readiness and releases; assess testing tools (Azure DevOps, Playwright, JIRA, Power BI); provide governance, reporting, Go/No-Go recommendations, and continuous improvement while collaborating with stakeholders and delivery teams.
Top Skills:
Azure DevopsJIRAPlaywrightPower BI
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
