Detection Engineer

About the RoleLead the development, implementation, and continuous improvement of security detection capabilities across SIEM, EDR/XDR, and SOAR platforms. Ensure effective threat detection, monitoring coverage, alert quality, and automation to strengthen the organization’s cyber defence capabilities.ResponsibilitiesLead SIEM, EDR/XDR, and SOAR detection content development.Manage detection use case lifecycle, validation, and quality assurance.Coordinate threat hunting and detection gap assessments.Improve enterprise threat detection coverage and maturity.Drive detection automation and continuous optimization.Align detection capabilities with emerging threats and attack techniques.Monitor and optimize detection performance and alert quality.Address detection gaps and support complex incident investigations.Track detection coverage, tuning activities, and operational KPIs. Qualification & Experience:Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.Should have 7–10 years of cybersecurity experience, with strong focus on detection engineering, SIEM, or threat detection.

Required Skills

Advanced SIEM detection rule and correlation search development.Strong SPL, KQL, or equivalent query language skills.EDR/XDR detection engineering and analytics.MITRE ATT&CK mapping and detection coverage assessment.SOAR playbook integration and security automation.Python, PowerShell, or Bash scripting.Threat intelligence and IOC integration.Detection testing, validation, and performance tuning.Log analysis, parsing requirements, and telemetry validation.Threat hunting and attack technique analysis.Cloud, network, endpoint, and OT/IoT detection concepts.Detection metrics, dashboards, and reporting.Root cause analysis and troubleshooting.Technical documentation and team mentoring.