India - Default Template

Overview

Security Threat Detection Engineer II (SOC) is a hands-on role in a 24x7 Security Operations Center, responsible for monitoring, triaging, and responding to security alerts.

What you'll do

• Monitor, triage, investigate, and respond to security alerts across SIEM/EDR, cloud, network, and identity sources.
• Continuously tune detections and alert logic to reduce false positives and improve signal-to-noise.
• Build, test, and maintain detection rules and use cases aligned to MITRE ATT&CK.
• Conduct proactive threat hunts and convert findings into new detection rules.
• Perform static and dynamic malware analysis to extract IOCs and inform containment and response.
• Automate SOC workflows using AI agents and SOAR playbooks.
• Track and report SOC metrics such as MTTD, MTTR, alert volume, false positive rates, and automation coverage.

What you'll need

• 4–6 years of experience in security operations, security engineering, incident response, or related roles.
• Ability to work in a 24x7 SOC on a rotating shift schedule including night shifts, weekends, and holidays.
• Hands-on experience with alert triage, investigation, and incident response in a SOC environment.
• Experience building and tuning detections in SIEM/EDR, including reducing false positives; familiarity with MITRE ATT&CK.
• Experience with threat hunts using endpoint, network, cloud, and identity telemetry and translating findings into detections.
• Experience with malware analysis (static and dynamic), including IOC extraction.
• Knowledge of cloud security platforms/services and their logging (AWS, GCP, Azure).

Details

• Location: Bangalore HQ.
• Shift: rotating schedule covering night shifts, weekends, and holidays in a 24x7 SOC.