Threat Detection Engineer

Job Title:Threat Detection Engineer

Location: Bangalore

Company Name: To One of Our FinTech GCC Organization

Work Mode: Hybrid

Experience:6+Years

Salary:32LPA -35LPA

Employment Type: Full Time

Notice Period: Immediate - 30Days(Serving Notice)

Mail ID: jangili.deekshitha@manpower.co.in

Job Description:

Job Summary: The ideal candidate will be responsible for designing, implementing, and maintaining advanced threat detection use cases within a hybrid SIEM environment. This role requires a deep understanding of security information and event management (SIEM), threat hunting, and incident analysis to protect our organization from emerging cyber threats.

Key Responsibilities: • Develop, optimize, and manage SIEM dashboards, searches, and alerts to identify potential security

threats in real-time. • Create and refine custom SIEM use cases, correlation rules, and detection logic to enhance threat visibility across systems and networks. • Perform threat hunting and analyze log data to proactively identify anomalies and gaps in current use case library. • Collaborate with incident response teams to investigate and mitigate security incidents, providing detailed forensic analysis when required. • Maintain and tune SIEM deployments, ensuring data integrity, performance, and scalability. • Integrate SIEM with other security tools and data sources to improve detection accuracy and coverage. • Stay current on evolving cyber threats, attack techniques, and industry best practices to continuously improve detection strategies. • Document processes, detection methodologies, and incident findings for knowledge sharing and compliance purposes.

Qualifications:

• 5+ years of experience in cybersecurity, with at least 3 years focused on SIEM use case development. • Highly proficient in Splunk Enterprise Security (ES), including SPL (Search Processing Language), dashboard creation, and alert configuration. • Strong understanding of network protocols, system logs, and security event analysis. • Experience with threat intelligence integration and applying MITRE ATT&CK framework to detection efforts. • Familiarity with scripting languages (e.g., Bash, Python, PowerShell) for automation and data analysis is a plus. • Understanding of offensive security tactics & techniques such as red teaming and advanced penetration testing is a plus. • Relevant certifications such as Splunk Certified Power User, Splunk Certified Admin, or cybersecurity certifications such as OSCP, GPEN, GCIH, GCFE are highly preferred. • Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment.

Preferred Skills: • Knowledge of additional SIEM platforms or security tools (e.g., Elastic, Google SecOps, Sentinel). • Ability to mentor team members and contribute to a collaborative security culture.