Senior Security Engineer – SIEM & Detection Engineering

Overview

Senior Security Engineer focused on SIEM and detection engineering to design, implement, and optimize security telemetry, analytics, and response coverage.

What you'll do

• Architect, implement, and maintain SIEM infrastructure for reliable log ingestion, parsing, correlation, and alerting.
• Develop and fine-tune detection analytics rules to identify suspicious or malicious activity across endpoints, networks, and cloud.
• Manage and enhance NDR and XDR platforms by integrating telemetry for end-to-end visibility.
• Partner with SOC and incident response teams to improve alert fidelity and reduce false positives.
• Integrate SIEM with SOAR and automation pipelines to support rapid response and consistent case handling.
• Maintain dashboards, metrics, and reporting to measure detection performance and operational efficiency.
• Run health checks and performance tuning for SIEM and NDR solutions, and maintain documentation, playbooks, and SOPs.

What you'll need

• 5–8 years of experience in security engineering, detection engineering, or SOC architecture in an enterprise environment.
• Expert-level knowledge of SIEM platforms (e.g., Splunk, XSOAR) including onboarding, parsing, rule creation, and optimization.
• Strong detection engineering skills including attack chain mapping, MITRE ATT&CK coverage, and event correlation.
• Experience with log source onboarding across systems such as firewalls, proxies, endpoints, cloud, identity, and email.
• Familiarity with SOAR tools and automation workflows for triage and enrichment.
• Strong scripting skills in Python, PowerShell, or Bash for rule automation, parsing, and enrichment.
• Understanding of cloud detection engineering across Azure, AWS, or GCP environments.

Details

• Location: Hyderabad, India.
• Shift timing: work hours may vary and may require availability during off-business hours.