Job Summary
Detection Engineering Lead (L3) Lot 5 – Detection Engineering Implementation Location: Hyderabad / Bangalore Experience: 10–12 Years Role Summary The Detection Engineering Lead (L3) will be responsible for designing, implementing, and governing enterprise threat detection capabilities across on-premises, cloud, identity, endpoint, and network environments. The role will lead detection engineering initiatives, improve security visibility, enhance threat detection coverage, and support cybersecurity transformation programs through advanced threat analytics and security monitoring practices.
Key Responsibilities
Roles and Responsibilities • Lead the design, implementation, and optimization of detection use cases across enterprise security monitoring platforms. • Develop and maintain advanced detection rules, correlation logic, analytics, and threat detection content aligned to organizational security objectives. • Define detection engineering standards, methodologies, and governance processes to improve security monitoring maturity. • Collaborate with SOC, Threat Intelligence, Incident Response, Vulnerability Management, and Security Architecture teams to identify emerging threats and detection requirements. • Drive continuous improvement of detection coverage by mapping use cases to MITRE ATT&CK;, Cyber Kill Chain, and industry security frameworks. • Lead onboarding of new security telemetry, log sources, cloud platforms, and business applications into the detection ecosystem. • Conduct threat hunting exercises, purple team engagements, and control validation activities to measure detection effectiveness. • Review alert quality, false positive rates, and detection performance metrics, implementing tuning and optimization activities. • Support implementation of automation and SOAR integrations to improve response effectiveness and operational efficiency. • Develop dashboards, executive reports, and security metrics providing visibility into detection maturity and threat coverage. • Provide technical leadership and mentorship to detection engineers and SOC analysts. • Support security transformation initiatives involving SIEM modernization, cloud security monitoring, identity security, and threat analytics.
Skill Requirements
Mandatory Skills • Detection Engineering • Threat Detection & Use Case Development • SIEM Platforms (Microsoft Sentinel, Splunk, QRadar, Chronicle, etc.) • MITRE ATT&CK; Framework • Security Monitoring & Threat Analytics • Threat Hunting • Alert Tuning & Correlation Engineering • KQL, SPL, SQL, or Equivalent Query Languages • SIEM & SOAR Integration • Security Operations & Incident Response Preferred Skills • Microsoft Sentinel • Defender XDR • Splunk Enterprise Security • XDR Platforms • Cloud Security Monitoring (Azure / AWS) • Python, PowerShell, or Automation Scripting • Security Data Lake & Advanced Analytics
Other Requirements
Certifications Mandatory • SC-200 Microsoft Security Operations Analyst or • Equivalent SIEM/Security Monitoring Certification Preferred • CISSP • GCIH • GCIA • SC-100 Microsoft Cybersecurity Architect • ITIL v4 Foundation Soft Skills • Strong analytical and investigative mindset • Excellent problem-solving capabilities • Strong communication and stakeholder management skills • Technical leadership and mentoring abilities • Ability to work across security, infrastructure, and cloud teams