Assistant Vice President, SCRAT Engineer (Splunk/ SIEM)

Job Role:

AVP Threat Detection & Response (SCRAT Engineer)

Location:

Bengaluru

Work Mode:

Onsite

About The Role

Key Responsibilities

Threat Detection & Use Case Engineering

• Design, refine, and implement advanced detection use cases aligned with global security frameworks such as MITRE ATT&CK and Cyber Kill Chain.
• Develop response strategies leveraging SIEM, UEBA, SOAR, EDR, and other security technologies.
• Conduct deep threat analysis using knowledge of attack patterns, TTPs, and adversarial behavior.
  

Cross-Functional Collaboration

• Partner with Threat Intelligence, Incident Response, Forensics, and SOC teams to create targeted and effective detection content.
• Participate in red-team and penetration testing exercises to validate robustness of detection logic.
  

Continuous Monitoring & Improvement

• Keep up to date with emerging threats, attack vectors, and industry trends to maintain resilient detection strategies.
• Produce metrics, dashboards, and performance reports to highlight effectiveness of use cases.
• Improve automation and correlation logic across multiple datasets for enhanced visibility and response.
  

Operational Security Expertise

• Drive investigations, monitoring, triage, and incident response workflows.
• Leverage SIEM/Splunk for integration, development, and content creation.
• Apply knowledge across network security, host forensics, anomaly detection, cloud security, and offensive security fundamentals.
  

Requirements

• Bachelor's degree in IT, Cyber Security, Computer Science, or related field.
• 58 years of experience in Information Security; SOC experience of 34 years preferred.
• Strong expertise with SIEM/Splunk, detection content development, and security automation.
• Familiarity with models/frameworks such as MITRE ATT&CK, Cyber Kill Chain, and CRI.
• Hands-on experience across:
• Network Security (Firewalls, IPS, WAF, Proxy, VPN)
• Incident Response & Forensics
• Anomaly Detection
• Cloud, OS, Application & Database Security
• Strong analytical, problem-solving, and time-management skills.
• Ability to correlate multiple datasets to investigate and validate security events.
• Preferred certifications: CISSP, ISSMP, SANS, GSEC, GCFA, GNFA, GIAC, GCIH, Splunk certifications.