OpenOpportunity Sourced Jobs — Bengaluru, Hyderabad, Noida
Full Time · Hybrid · Senior
Role: IT & Information Security - Other | Department: IT & Information Security | Industry: IT Services & Consulting | Education: UG: Any Graduate Role & Responsibilities: 1. Detection Engineering (Primary Focus) • Design, develop, and maintain high-fidelity detection rules and analytics across CrowdStrike Falcon (NGSIEM/EDR) and integrated SIEM platforms. • Translate threat intelligence and adversary behaviors (MITRE ATT&CK) into scalable detection use cases. • Continuously tune and optimize detections to improve alert fidelity and signal-to-noise ratio. • Develop and maintain detection-as-code practices, including version control, testing, and documentation. • Perform coverage gap analysis and proactively build new detections to address emerging threats. • Partner with threat hunting teams to convert hypotheses into production-grade detections. • Validate detection coverage through purple teaming, adversary simulation, and attack replay testing. • Build detection strategies across: Endpoint (EDR), Identity, Network and OT telemetry, Cloud environments. 2. SOAR Engineering & Automation (Secondary Focus) • Design and implement automated playbooks using CrowdStrike Falcon Fusion and/or SOAR platforms. • Automate end-to-end incident response workflows, including alert triage and enrichment, threat intelligence correlation, endpoint containment and remediation, case management and escalation. • Integrate SOAR with SIEM, EDR (CrowdStrike), NDR, vulnerability management, and threat intelligence platforms. • Develop and maintain API-based integrations and connectors across security tools. • Ensure automation workflows are resilient, auditable, and governed. • Continuously identify opportunities to reduce manual SOC effort through orchestration. 3. Operational Mentality and SOC Optimization • Champion a detection-first SOC model supported by automation. • Improve SOC workflows through automated enrichment, triage, and response actions. • Collaborate with SOC analysts, threat hunters, and engineers across APAC. • Enhance operational metrics such as Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), and alert fidelity/reduction of false positives. 4. OT & R&D Security Strategy • Develop detection and response use cases tailored for OT/ICS, SCADA, and IIoT environments. • Collaborate with engineering and R&D teams to integrate detect-and-respond capabilities into product lifecycles. • Align detection strategies with MITRE ATT&CK (Enterprise & ICS), NIST CSF / NIST 800-82, and IEC 62443. • Ensure safe implementation of automation within sensitive OT environments. Job Qualifications: Required Qualifications & Experience: • 7+ years of experience in cybersecurity with a focus on detection engineering, SOC operations, or incident response. • 3+ years of hands-on experience in detection engineering/SIEM content development and SOAR platforms (CrowdStrike Falcon Fusion preferred). • Strong experience with CrowdStrike Falcon (EDR + NGSIEM). • Proven experience building detection rules, behavioral analytics, and correlation logic. • Proficiency in scripting and automation (Python, PowerShell, or similar). • Experience with detection-as-code and API integrations. • Strong understanding of MITRE ATT&CK (Enterprise & ICS), threat detection methodologies, and incident response lifecycle. • Hands-on experience with SIEM, EDR, NDR, and threat intelligence platforms. • Foundational knowledge of IT and OT security (ICS/SCADA environments). • Experience securing R&D environments and intellectual property. • Working knowledge of cloud security (AWS, Azure, GCP). Desired Certifications: • GIAC Certified Incident Handler (GCIH) • GIAC Security Operations Certified (GSOC) • GIAC Security Essentials (GSEC) • Certified Cloud Security Professional (CCSP) • Certified Information Systems Security Professional (CISSP) • CompTIA Security+ • CompTIA CySA+ • AWS Certified Security Specialty • Microsoft SC-200 Originally posted on Naukri: https://www.naukri.com/job-listings-cybersecurity-lead-detection-soar-engineer-atyeti-noida-hyderabad-bengaluru-7-to-12-years-090626015199
SOAR Automation, SOAR, Cyber Security, Threat Intelligence