Description

Key Skills: Detection Engineering, SIEM, EDR, MITRE ATT&CK, Splunk, CrowdStrike Falcon, Microsoft Defender, Threat Detection, Security Operations, Purple Teaming

Good to Have Skills: Experience with Sigma rule authoring and cross-platform detection engineering. Exposure to Threat Intelligence integration and threat-driven detection strategies. Understanding of risk-based alerting and alert prioritization techniques. Offensive security certifications such as OSCP, CRTE, or equivalent. Experience with CrowdStrike Falcon detection authoring. Familiarity with MITRE ATLAS and AI/ML threat detection concepts. Scripting experience in Python for automation, log analysis, or tooling development. Experience in creating security standards, logging frameworks, or governance documentation.

Roles & Responsibilities:

• Translate offensive security findings, penetration test reports, and red team assessments into actionable detection use cases
• Develop, validate, and maintain detection rules across SIEM and EDR platforms for production readiness
• Build correlation-based detections using Splunk and native detections within platforms such as CrowdStrike Falcon and Microsoft Defender
• Maintain and improve MITRE ATT&CK coverage across the organization and identify detection gaps
• Develop investigation guides and runbooks for security operations teams to improve operational effectiveness
• Support MSSP and SOC teams by improving alert quality and reducing false positives through detection optimization
• Maintain a centralized detection rule repository with proper documentation and version control for governance
• Report detection coverage and security monitoring effectiveness to stakeholders through measurable metrics and analysis

Experience Required: 3+ years of experience in Detection Engineering, Security Operations, Threat Detection, or related cybersecurity roles with hands-on experience writing and maintaining production-grade detection rules

Key Skills

Education

Any Graduate