Sr Administrator (Support & Operations)
India
Apply now
Job Description
Sr Administrator (Support & Operations)
Hyderabad, Telangana

Job Summary

Detection Engineering Analyst (L2) Lot 5 – Detection Engineering Implementation Location: Hyderabad / Bangalore Experience: 5–7 Years Role Summary The Detection Engineering Analyst (L2) will be responsible for implementing, tuning, and optimizing security detections across enterprise environments. The role will support cybersecurity transformation initiatives by developing detection use cases, improving threat visibility, reducing false positives, and enhancing the organization\'s ability to detect and respond to security threats.

Key Responsibilities

 Roles and Responsibilities • Design, implement, and maintain security detection use cases aligned to organizational security and risk requirements. • Develop and tune detection rules, correlation searches, alerts, and threat-hunting queries across SIEM and security monitoring platforms. • Collaborate with SOC, Threat Intelligence, Incident Response, and Security Engineering teams to improve detection coverage and effectiveness. • Analyze security events, attack techniques, and threat patterns to identify gaps in existing monitoring capabilities. • Conduct regular reviews of alerts and detection content to reduce false positives and improve operational efficiency. • Support onboarding of new log sources, security tools, cloud services, and business applications into the detection ecosystem. • Map detections to industry frameworks such as MITRE ATT&CK;, NIST, and Cyber Kill Chain methodologies. • Participate in security assessments, purple team exercises, and threat simulations to validate detection capabilities. • Develop documentation, operational procedures, detection standards, and knowledge articles. • Produce dashboards and reporting on detection effectiveness, coverage, alert quality, and security monitoring maturity. • Support continuous improvement initiatives focused on threat detection, automation, and security operations transformation.

Skill Requirements

Mandatory Skills • Detection Engineering • SIEM Platforms (Microsoft Sentinel, Splunk, QRadar, Chronicle, etc.) • Security Monitoring & Alert Tuning • Threat Detection & Use Case Development • MITRE ATT&CK; Framework • KQL, SPL, SQL, or Similar Query Languages • Security Incident Analysis • Log Management & Event Correlation • Cybersecurity Operations • Security Reporting & Analytics Preferred Skills • Microsoft Sentinel • Defender XDR • Splunk Enterprise Security • SIEM Automation & SOAR • Python or PowerShell Scripting • Threat Hunting • Cloud Security Monitoring (Azure/AWS)

Other Requirements

Certifications Mandatory • Security+ or equivalent security certification Preferred • SC-200 Microsoft Security Operations Analyst • Splunk Core Certified User/Power User • GIAC Certified Incident Handler (GCIH) • ITIL v4 Foundation • Microsoft Sentinel Certifications Soft Skills • Strong analytical and investigative mindset • Excellent problem-solving capabilities • Strong communication and documentation skills • Ability to work across security and infrastructure teams • Continuous learning and security-focused mindset

 
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.