Security Content Engineer (Detection Engineering)

At Securonix, we re on a mission to secure the world by staying ahead of cyber threats, reinforcing all layers of our platform with AI capabilities. Our
Securonix Unified Defense SIEM provides organizations with the first and only AI-Reinforced solution built with a cybersecurity mesh architecture on a highly scalable data cloud. Enhanced by Securonix EON s AI capabilities, our innovative cloud-native solution delivers a seamless CyberOps experience, empowering organizations to scale their security operations and keep up with evolving threats.

Recognized as a
five-time leader in the Gartner Magic Quadrant for SIEM and highly rated on Gartner Peer Insights, our award-winning Unified Defense SIEM provides organizations with 365 days of hot data for rapid search and investigation, threat content-as-a-service, proactive defense through continuous peer and partner collaboration, and a fully integrated Threat Detection, Investigation, and Response (TDIR) experience all within a single platform. Built on a cloud-native architecture, the platform leverages the Snowflake Data Cloud for unparalleled scalability and performance.

Securonix is proud to be a cybersecurity unicorn
and featured in CRNs 2024 Security 100 list . Backed by Vista Equity Partners, one of the largest private equity firms with over $100 billion in assets under management, we have a unique advantage in driving innovation and growth. With a global footprint, we serve more than
1,000 customers worldwide, including 10% of the Fortune 100 . Our network of 150+ partners and Managed Security Service Providers (MSSPs) enables us to deliver unmatched security solutions on a global scale.

At Securonix, we are driven by our core values and place our people at the heart of everything we do:

• Winning as One Team : We work together with universal respect to achieve aligned outcomes


• Customer Driven Innovation : We innovate to stay ahead of the market and create value for our customers


• Agility in Action : We embrace change and are unified in our purpose and objectives amidst change

Join us as we redefine cybersecurity, innovate fearlessly, and grow together as one team.

Primary Skill Sets: Python, Log Analysis, SIEM, JIRA, Ticket Management

Secondary Skill Sets: MITRE Framework, NOC, SOC, Playbooks

Summary:

We are looking at passionate threat detection engineers who like to fight bad-guys by helping organizations detect attackers within the shortest MTD possible. You will be part of the Securonix Detection Engineering team that is responsible for building the security analytics content, anomaly and threat detection models for the Securonix Next Generation SIEM platform and responding and providing awareness of advanced cyber and insider threats to our community. Our teams mission is to continuously develop detection methods to address the constantly-shifting threat landscape and detect the latest real-world cyberattacks.

Responsibilities of the Role:

• Learn the platform capabilities and internals to be able to support troubleshoot issues with detection content


• Triage customer tickets and provide technical support for issues in customer environment associated to detection content


• Provide on-call support during weekdays and weekends


• Proactively monitor reports and dashboards tracking content metrics from the field and flag issues


• Help generate or collect sample logs relevant for resolution of detection tickets


• Document RCAs for issues resolved


• Ensure detection content is sufficiently tested and validated before pushing to production


• Submit clear documentation around the detection content developed


• Responsible for maintaining policies and threat-models in the Securonix platform

Skills Required:

• At-least 1 year of prior experience in building threat detection content for SIEM platforms like ArcSight, QRadar, Splunk, LogRhythm, etc.


• Understanding of the different MITRE ATT&CK Matrices


• Strong fundamentals in network and operating systems concepts


• Experience working with offensive security testing tools


• Ability to automate basic tasks using scripting languages like Python


• Experience in GIT and SVN based code management


• Strong written and verbal communication skills

Additional Skills (Good to Have):

• Prior investigations and response / SOC experience


• Information security professional certifications (OSCP, CEH, etc.)


• Developer or contributor to open-source attack or defense cyber-security tools

Benefits:

As a full-time employee with Securonix, you will be eligible for the following employee benefits:

• Health Insurance with a total sum insured is INR 7,50,000


• Coverage: Self, Spouse, 2 kids, Dependent parents, or parents-in-law


• Personal Accident with total sum insured is INR 10,00,000


• Term Life Insurance with a sum assured for employees is 5 times fixed base pay is covered.

Securonix, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, amnesty or status as a covered veteran in accordance with applicable federal, state and local laws. Securonix complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, and transfer, leaves of absence, compensation and training.

Securonix expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, national origin, age, genetic information, disability or veteran status. Improper interference with the ability of Securonix employees to perform their expected job duties is absolutely not tolerated.