Cyber Detection Engineer

About the role

The Detection Engineer supports the development, testing, tuning, and maintenance of cyber detection capabilities across the Security Operations Centre (SOC). Working closely with SOC analysts, threat intelligence, incident response, and engineering teams, this role helps improve visibility, detection accuracy, and response effectiveness.

What you'll do

• Support the development, testing, and maintenance of SIEM detection rules, analytics, alerts, and correlation logic
• Assist with tuning existing detections to reduce false positives and improve detection quality
• Investigate missed detections and support root-cause analysis activities
• Work with SOC analysts to understand alert triage outcomes and improve detection content
• Help onboard new log sources into monitoring platforms and validate data quality and coverage

What you need

• 1–3 years in cybersecurity
• Incident response
• SIEM
• Firewalls
• LLMs
• Networking
• TCP/IP
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Python
• AWS
• SQL
• Azure
• PowerShell
• Root cause analysis