Back to list

Vacancy description

Sr IT Security Analyst-SIEM Detection Engineering in Hyderabad, भारत

Mattel

  • Full-timeStandard weekly hours

Hyderabad, भारत



CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

Job Description

Job Description

 

The Senior Security Engineer – SIEM & detecting Engineering is responsible for designing, implementing, and optimizing Mattel’s SIEM, NDR, and XDR ecosystems to ensure comprehensive global detection and response coverage. This role requires deep expertise in security telemetry, log management, and detection engineering, with hands-on experience developing scalable analytics, alerts, and integrations that strengthen detection posture, accelerate response, and enhance operational efficiency. 

Roles and Responsibilities 

  • Architect, implement, and maintain SIEM infrastructure to ensure reliable log ingestion, parsing, correlation, and alerting across enterprise systems. 

  • Develop and fine-tune detection content and analytics rules to identify suspicious or malicious activity across endpoints, networks, and cloud environments. 

  • Manage and enhance Network Detection and Response (NDR) and Extended Detection and Response (XDR) platforms, integrating telemetry for end-to-end visibility. 

  • Partner with the SOC and Incident Response teams to improve alert fidelity, reduce false positives, and accelerate investigation workflows. 

  • Integrate SIEM with SOAR and automation pipelines to support rapid response and consistent case handling. 

  • Collaborate with infrastructure and application teams to ensure comprehensive log coverage and compliance with data retention and privacy requirements. 

  • Develop and maintain dashboards, metrics, and reporting to measure detection performance and operational efficiency. 

  • Conduct periodic health checks, tuning, and performance optimization for SIEM and NDR solutions. 

  • Maintain detailed documentation, playbooks, and SOPs supporting SIEM and NDR operations. 

Skills and

Qualifications

 

Required: 

  • 5–8 years of experience in security engineering, detection engineering, or SOC architecture in an enterprise environment. 

  • Expert-level knowledge of SIEM platforms (e.g., Splunk, XSOAR, or equivalent), including onboarding, parsing, rule creation, and optimization. 

  • Strong understanding of detection engineering, including attack chain mapping, MITRE ATT&CK coverage, and event correlation. 

  • Experience with log source onboarding (firewalls, proxies, endpoints, cloud, identity, email systems etc.). 

  • Familiarity with SOAR tools and automation workflows for triage and enrichment. 

  • Strong scripting skills (Python, PowerShell, or Bash) for rule automation, parsing, and enrichment. 

  • Understanding of cloud detection engineering across Azure, AWS, or GCP environments. 

  • Excellent analytical, problem-solving, and communication skills, with a focus on collaboration and data-driven decision-making. 

  • SIEM engineering and administration (Splunk, Sentinel, etc.) 

  • Log collection, parsing, and correlation logic development 

  • NDR/XDR deployment and tuning (e.g., ExtraHop, Vectra, Cisco, CrowdStrike, or similar) 

  • Detection engineering and content lifecycle management 

  • Cloud detection coverage (Azure, AWS, GCP) 

  • Scripting and automation (Python, PowerShell, Bash) 

  • SOAR integration for alert enrichment and response automation 

  • Data normalization, threat hunting, and query development 

  • Familiarity with the MITRE ATT&CK and D3FEND frameworks 

  • Network security, endpoint telemetry, and identity-based detection techniques 

 

Preferred: 

  • Bachelor’s degree in Cybersecurity, Computer Science, or related technical field, or equivalent professional experience. 

  • Demonstrated success designing, scaling, and maintaining enterprise SIEM and detection systems. 

  • Certifications such as GIAC Certified Detection Analyst (GCDA), GIAC Security Operations Certified (GSOC), CompTIA CySA+, ISC2 SSCP, Splunk Enterprise Security Certified Admin or Architect, or equivalent detection engineering or SIEM certification 

  • Analytical and detail-oriented with a focus on precision and reliability 

  • Strong communication and collaboration across technical and non-technical stakeholders 

  • Adaptable and proactive in a fast-paced, global environment 

  • Passion for continuous learning, innovation, and automation in security operations 

  • Effective mentor and team contributor 

Shift Timing:

Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events. 

Additional Information



Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the

job description

, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:
We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:
  • We collaborate:  Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
  • We innovate:  At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
  • We execute:  We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:
We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.

Who We Are:
Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Visit us at and  .

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.

Videos to watch:
The Culture at Mattel
Corporate Philanthropy

Similar vacancies

More like this role

  • Cybersecurity
Role : SOC Analyst L3We are looking for a technically strong SOC Analyst L3 to lead advanced threat hunting, complex security incident investigations, and detection engineering initiatives within the Security Operations Center (SOC).Key Responsibilities :- Lead proactive threat hunting activities to identify suspicious ...

Hyderabad, भारत

  • Full-time
... partner is looking for a Security Operations Analyst based in India . In this role, you will play a key part in strengthening enterprise cybersecurity through security operations engineering, threat detection, and automated incident response. You will design, deploy, and maintain security integrations across SIEM, SOAR, endpoint ...

भारत

  • Full-time
... junior analysts and regional partners when required ● Support tabletop exercises and readiness assessments. Requirements ● 5–8+ years of hands-on experience in Security Operations, Incident Response, threat hunting, or Detection Engineering ● Strong knowledge of SIEM platforms (e.g., Splunk, ELK, Sentinel), EDR tools (CrowdStrike, ...

Noida, भारत

  • Hybrid
... reliability through monitoring, alerting, and periodic audits. • Partner with detection engineering and SOC analysts to translate threat scenarios into actionable SIEM content. • Own SIEM platform architecture decisions, including sizing, retention, licensing, and integration with SOAR and other security tools. • Document integration ...

Bangalore, भारत

  • Contract
... improvement.. - Recommend or develop new detection logic and tune existing sensors / security controls. Work with security solutions owners to assess existing security solutions array ability to detect / mitigate the abovementioned TTPs. - Creating custom SIEM queries and dashboards to support the monitoring and detection ...

Hyderabad, भारत

  • On-site
  • Cybersecurity
... leading-edge solutions. Responsibilities Security operations analyst who triages and investigates alerts in a 24x7 setting and also writes, tunes and retires the detection rules, across on-premises and cloud logs. Skills Must have SIEM rule-writing Alert triage and investigation Detection engineering and tuning EDR, NDR, firewall ...

Hyderabad, भारत

Atyeti IT Services Private Limited

Atyeti - Senior Detection Engineer

... automation within sensitive OT https://jobeax.com/link/kobDDMkB48d6CyMn Qualifications :Required Qualifications & Experience :- 7+ years of experience in cybersecurity with a focus on detection engineering, SOC operations, or incident response.- 3+ years of hands-on experience in :i. Detection engineering / SIEM content developmentii. ...

Pune, भारत

... Microsoft 365 security telemetry.- Experience with SIEM operations, security incident investigation, alert triage, and escalation.- Understanding of MITRE ATT&CK, security use cases, detection engineering, and threat hunting.- Experience with Sentinel automation rules, playbooks, and Logic Apps.- Familiarity with Azure Monitor, ...

Bangalore, भारत

  • Full-time
  • Cybersecurity
... include a fitness center, cafe, and recreational facilities. Learn more at https://jobeax.com/link/syLX4zShGm5VyUK0 Job Description We are looking for a Senior Security Analyst with strong hands-on experience in email security, Microsoft security technologies, vulnerability management, SIEM monitoring, and incident response. ...

Bangalore, भारत

... ensure successful deployment of SIEM components.- Assist with threat detection, threat hunting, correlation analysis, and SOC monitoring requirements.- Tune detection rules and reduce false positives while maintaining effective security coverage.- Prepare implementation documentation, architecture documents, configuration ...

Hyderabad, भारत

  • Hybrid
Summary #LI-Hybrid Location: Hyderabad, India Network Security Engineering team is a global team working on delivery and deployment of network security solutions and services following design standards and according to business needs. The team works with 5+ security vendors and products to deliver security services for ...

Hyderabad, भारत