Security Detection Engineer III

About the role

The Security Engineer III, Detection Engineering is a career-level security engineering professional responsible for developing, testing, deploying, and continuously improving detection capabilities that support Security Operations.

What you'll do

• Develop and maintain custom detections using Detection-as-Code practices, including version control, peer review, testing, and CI/CD deployment workflows
• Analyze and improve detection coverage by mapping telemetry and detections to adversary behaviors and the MITRE ATT&CK framework
• Partner with Incident Response, Threat Intelligence, Logging Engineering, and security platform teams to translate emerging threats, investigations
• Validate and tune detections through adversary emulation, atomic testing, purple-team exercises
• Automate and optimize detection engineering workflows, alert enrichment processes, and operational activities to improve efficiency and scalability

What you need

• 5–9 yrs of experience
• Incident response
• SIEM
• EDR
• OWASP
• Python
• Splunk
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CI/CD
• LLMs
• SQL
• Test automation
• PowerShell
• Git