Atyeti - Senior Detection Engineer in Pune, भारत

Job Description :Job Responsibilities :Detection Engineering (Primary Focus) :- Design, develop, and maintain high-fidelity detection rules and analytics across CrowdStrike Falcon (NGSIEM/EDR) and integrated SIEM platforms.- Translate threat intelligence and adversary behaviors (MITRE ATT&CK) into scalable detection use cases.- Continuously tune and optimize detections to improve alert fidelity and signal-to-noise ratio.- Develop and maintain detection-as-code practices, including version control, testing, and documentation.- Perform coverage gap analysis and proactively build new detections to address emerging threats.- Partner with threat hunting teams to convert hypotheses into production-grade detections.- Validate detection coverage through purple teaming, adversary simulation, and attack replay testing.- Build detection strategies across :i. Endpoint (EDR)ii. Identityiii. Network and OT telemetryiv. Cloud environmentsSOAR Engineering & Automation (Secondary Focus) :- Design and implement automated playbooks using CrowdStrike Falcon Fusion and/or SOAR platforms.- Automate end-to-end incident response workflows, including :i. Alert triage and enrichmentii. Threat intelligence correlationiii. Endpoint containment and remediationiv. Case management and escalation- Integrate SOAR with SIEM, EDR (CrowdStrike), NDR, vulnerability management, and threat intelligence platforms.- Develop and maintain API-based integrations and connectors across security tools.- Ensure automation workflows are resilient, auditable, and governed.- Continuously identify opportunities to reduce manual SOC effort through https://jobeax.com/link/wgMnhDTMnDcWWFUE Mentality and SOC Optimization :- Champion a detection-first SOC model supported by automation.- Improve SOC workflows through automated enrichment, triage, and response actions.- Collaborate with SOC analysts, threat hunters, and engineers across APAC.- Enhance operational metrics such as :i. Mean Time to Detect (MTTD)ii. Mean Time to Respond (MTTR)iii. Alert fidelity and reduction of false positivesOT & R&D Security Strategy :- Develop detection and response use cases tailored for OT/ICS, SCADA, and IIoT environments.- Collaborate with engineering and R&D teams to integrate detect-and-respond capabilities into product lifecycles.- Align detection strategies with :i. MITRE ATT&CK (Enterprise & ICS)ii. NIST CSF / NIST 800-82iii. IEC 62443- Ensure safe implementation of automation within sensitive OT https://jobeax.com/link/kobDDMkB48d6CyMn Qualifications :Required Qualifications & Experience :- 7+ years of experience in cybersecurity with a focus on detection engineering, SOC operations, or incident response.- 3+ years of hands-on experience in :i. Detection engineering / SIEM content developmentii. SOAR platforms (CrowdStrike Falcon Fusion preferred)iii. Strong experience with CrowdStrike Falcon (EDR + NGSIEM)- Proven experience building detection rules, behavioral analytics, and correlation logic.- Proficiency in scripting and automation (Python, PowerShell, or similar).- Experience with detection-as-code and API integrations.- Strong understanding of :i. MITRE ATT&CK (Enterprise & ICS)ii. Threat detection methodologiesiii. Incident response lifecycle- Hands-on experience with SIEM, EDR, NDR, and threat intelligence platforms.- Foundational knowledge of IT and OT security (ICS/SCADA environments).- Experience securing R&D environments and intellectual property.- Working knowledge of cloud security (AWS, Azure, GCP).Desired Certifications :- GIAC Certified Incident Handler (GCIH)- GIAC Security Operations Certified (GSOC)- GIAC Security Essentials (GSEC)- Certified Cloud Security Professional (CCSP)- Certified Information Systems Security Professional (CISSP)- CompTIA Security+- CompTIA CySA+- AWS Certified Security Specialty- Microsoft SC-200 (ref:hirist.tech)