Security Detection Engineer

Overview

Security Detection Engineer responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms.

What you'll do

• Develop, test, and maintain detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms.
• Regularly review and enhance detection logic to improve accuracy, reduce noise, and align with evolving threats.
• Work with engineering teams to ensure high-quality, normalized telemetry for effective detection.
• Automate detection rule deployment, QA, and version control using scripting and CI/CD pipelines.
• Conduct root cause analysis (RCA) on missed detections, delayed responses, and high-severity incidents and drive corrective actions.
• Maintain a security improvement backlog and analyze detection performance metrics to guide improvements.
• Collaborate with SOC, Incident Response, and Threat Hunting teams to operationalize detection improvements.

What you'll need

• Strong knowledge of SIEM, SOAR, EDR, and cloud security platforms.
• Proficiency in scripting and automation (Python, PowerShell).
• Familiarity with detection-as-code principles and CI/CD pipelines.
• Understanding of MITRE ATT&CK framework and threat-informed defense.
• Ability to work with SOC analysts, threat hunters, and engineers.
• Skilled in documenting detection logic and RCA outcomes.

Details

• Location: Chennai, Tamil Nadu, India.
• Work mode: Hybrid.