This is a role that TechTree is recruiting for on behalf of one of our clients.
TechTree is an AI-driven recruitment platform working with high-growth companies.
When you apply, our AI Agent matches you not just to this role, but to other relevant opportunities across our network, so one application can unlock multiple roles.
CyberSecurity Logging & Monitoring (L&M) Service Specialist — Splunk/Cribl deep-dive role. Warsaw, on-site.
We're recruiting on behalf of a major EU Justice & Home Affairs agency for a long-term, on-site security engagement in Warsaw.
You'll own the logging & monitoring stack end-to-end, blending SIEM administration, security architecture, and both offensive and defensive security practice.
What You'll Do
→ Administer and architect Splunk (Enterprise, ES, SOAR, UBA) and Cribl Stream
→ Design logging & monitoring architecture, HLD/LLD docs, and security policies
→ Hunt threats, engineer detections, and map coverage to MITRE ATT&CK / D3FEND
→ Apply offensive security skills (pentesting, red teaming) to validate detection
→ Deploy security infrastructure as code via CI/CD (Azure DevOps)
What We're Looking For
→ 10+ years IT experience, 8+ years in a similar SIEM/security monitoring role
→ Deep hands-on Splunk and Cribl Stream expertise
→ At least 3 of: CISSP, CCSP, GPEN, Splunk Certified Admin, Splunk ES Certified Admin, TOGAF 9
→ Willingness to hold CONFIDENTIEL UE/EU CONFIDENTIAL clearance from day one
Long-term contract: 12-month initial term with up to 3 annual renewals (up to 48 months total).
What is TechTree?
TechTree combines AI agents with a human support team to give candidates a better, more transparent hiring experience.
Our AI Agent gets to know your background, experience, and what you're optimising for. It continuously matches you to live roles across our network where there's genuine alignment, not just keyword overlap.
Our Human Team is there to support you through the process — answering questions, adding context, and making sure you're never left guessing or ghosted.
We only post real jobs. Every role on TechTree is a live, active hire.