Description

You will design, build, and maintain detection rules across SIEM and EDR platforms to identify and mitigate security threats.

This role is on-site.

Responsibilities

• Translate red team assessments and penetration test findings into actionable detection use cases.
• Develop, validate, and maintain production-grade detection rules using Splunk, CrowdStrike Falcon, and Microsoft Defender.
• Maintain and improve MITRE ATT&CK coverage, identifying and closing detection gaps.
• Support SOC and MSSP teams by optimizing alerts to reduce false positives and improve operational effectiveness.
• Create and maintain investigation guides, runbooks, and a centralized detection rule repository with version control.

Required Skills

• 5+ years of experience in Detection Engineering, Security Operations, or Threat Detection.
• Hands-on experience writing and maintaining production-grade detection rules.
• Deep knowledge of SIEM (Splunk) and EDR (CrowdStrike Falcon, Microsoft Defender) platforms.
• Strong understanding of MITRE ATT&CK framework and threat-driven detection strategies.
• Experience with threat intelligence integration and risk-based alerting.
• Proficiency in Python for automation, log analysis, or tooling development.
• Ability to report detection coverage and security monitoring effectiveness to stakeholders.

Preferred Skills

• Experience with Sigma rule authoring and cross-platform detection engineering.
• Offensive security certifications (OSCP, CRTE) or familiarity with MITRE ATLAS.
• Experience creating security standards, logging frameworks, or governance documentation.

Key Skills

Education

Any Graduate