Security Detection Engineer

Overview

Security Detection Engineer responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms. The role focuses on proactive threat detection, automation, root cause analysis, and continuous improvement of security operations.

What you'll do

• Develop and maintain detection rules across SIEM, EDR, NDR, and cloud-native platforms.
• Enhance detection logic to improve accuracy and reduce noise.
• Automate rule deployment, quality assurance, and version control using scripting and CI/CD.
• Conduct root cause analysis of missed detections, delayed responses, and high-severity incidents.
• Maintain a backlog of detection gaps, telemetry blind spots, and false positives.
• Collaborate with SOC, incident response, threat hunting, and threat intelligence teams.
• Validate detection logic through purple team exercises and simulated attack paths.

What you'll need

• Strong knowledge of SIEM, SOAR, EDR, and cloud security platforms.
• Proficiency in Python and PowerShell scripting and automation.
• Familiarity with detection-as-code principles and CI/CD pipelines.
• Understanding of the MITRE ATT&CK framework and threat-informed defense.
• Ability to document detection logic and root cause analysis outcomes.
• Strong analytical, problem-solving, communication, and teamwork skills.

Nice to have

• GIAC GCTI, GCFA, or equivalent advanced security certification.

Details

• Location: Chennai, India.
• Hybrid work approach, with teams in the office around four days a week.