Cyber Detection Engineer

Analog Devices, Inc.; Bengaluru; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Analog Devices, Inc. in Bengaluru is seeking an early‑career Detection Engineer to join the SOC. You will help design, test, and tune SIEM detection rules, investigate detections, and collaborate with threat intel and incident response teams to improve visibility and response effectiveness.

The role emphasizes learning and applying MITRE ATT&CK, threat hunting, and automation within SIEM/SOAR environments, with opportunities to contribute to detection strategy across multiple time zones.

Qualifications

• Understanding of cybersecurity fundamentals including phishing, malware, identity attacks, and incident response.
• Knowledge of AI-assisted detection engineering, large language models, agentic workflows, and security automation platforms.
• Basic knowledge of SIEM platforms and log analysis concepts.
• Networking fundamentals including TCP/IP, DNS, HTTP, authentication, and firewalls.
• Strong analytical and problem-solving skills; quick learner in a collaborative setting.

Responsibilities

• Develop, test, and maintain SIEM detection rules, analytics, alerts, and correlation logic.
• Tune detections to reduce false positives and improve detection quality.
• Investigate missed detections and support root-cause analysis.
• Onboard new log sources into monitoring platforms and validate data quality.
• Develop detection use-cases using threat intelligence and MITRE ATT&CK.
• Participate in threat hunting and contribute to detection improvements.
• Maintain detection engineering documentation, standards, and testing records.
• Support automation workflows within SIEM, SOAR, and response platforms.

Skills

Analytical thinking

Communication skills

Learning agility

Cybersecurity fundamentals

AI-powered detection

SIEM/log analysis

Networking basics

Team collaboration

Scripting (Python/PowerShell/KQL/SQL)

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or equivalent experience

Tools

SIEM/SOAR platforms

Cloud platforms (AWS, Azure)

Python scripting

Job description

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Detection Engineer – Early Career Role Overview

The Detection Engineer supports the development, testing, tuning, and maintenance of cyber detection capabilities across the Security Operations Centre (SOC). Working closely with SOC analysts, threat intelligence, incident response, and engineering teams, this role helps improve visibility, detection accuracy, and response effectiveness. This is an early-career position designed for individuals looking to build expertise in detection engineering, SIEM content development, threat analytics, and automation. The successful candidate will demonstrate curiosity, analytical reasoning, and the ability to independently investigate why a detection fired, how an attack could occur, and how future detections can be improved.

Key Responsibilities

• Support the development, testing, and maintenance of SIEM detection rules, analytics, alerts, and correlation logic.
• Assist with tuning existing detections to reduce false positives and improve detection quality.
• Investigate missed detections and support root‑cause analysis activities.
• Work with SOC analysts to understand alert triage outcomes and improve detection content.
• Help onboard new log sources into monitoring platforms and validate data quality and coverage.
• Support detection use‑case development using threat intelligence, MITRE ATT&CK, incident findings, and known attack techniques.
• Participate in threat hunting exercises and assist with developing new detection opportunities.
• Assist with maintaining detection engineering documentation, standards, playbooks, and testing records.
• Support development of automation workflows within SIEM, SOAR, and response platforms.
• Assist the SOC in the triage, investigation, and response of security alerts, incidents, and escalations.
• Contribute to purple‑team, tabletop, and validation exercises to measure effectiveness of detections.
• Track detection performance metrics, including false positives, false negatives, detection coverage, and alert quality.
• Support continuous improvement activities following incidents, audits, and lessons learned reviews.
• Maintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after‑hours escalations across multiple time zones as needed.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or equivalent experience.
• 1–3 years experience in cybersecurity, IT operations, SOC operations, system administration, or related technical field.
• Understanding of cybersecurity fundamentals including phishing, malware, identity attacks, network attacks, and incident response.
• Knowledge of AI‑assisted detection engineering, large language models (LLMs), agentic workflows, and security automation platforms used to improve analyst productivity and detection outcomes.
• Basic knowledge of SIEM platforms and log analysis concepts.
• Understanding of networking fundamentals including TCP/IP, DNS, HTTP, authentication, and firewalls.
• Strong analytical and problem‑solving skills.
• Ability to learn quickly and work effectively within a collaborative team environment.
• Strong written and verbal communication skills.

Preferred Qualifications

• Experience with SIEM/SOAR platforms, Microsoft Defender, Azure, AWS, or similar platforms.
• Experience developing, integrating, or operationalizing AI‑powered analysis, automation, and agent‑based workflows within security operations, incident response, or detection engineering functions.
• Knowledge of MITRE ATT&CK framework.
• Basic scripting experience using Python, PowerShell, KQL, or SQL.
• Security+, SC‑200, AZ‑500, CySA+, or equivalent certifications.
• Experience participating in labs, CTFs, internships, threat hunting, or cyber research projects.

Success Measures

• Improvement in detection quality and reduction in false positives.
• Successful onboarding and validation of data sources.
• Delivery of new and enhanced detection use cases.
• Contribution to incident‑driven detection improvements.
• Accurate documentation and testing of detection logic.

Export Licensing

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position – except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) – may have to go through an export licensing review process.

Equal Opportunity

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

Additional Information

Job Req Type: Experienced Required Travel: Yes, 10% of the time Shift Type: 1st Shift/Days

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X. Come join ADI – a place where Innovation meets Impact. For more than 55 years, Analog Devices has been inventing new breakthrough technologies that transform lives. At ADI you will work alongside the brightest minds to collaborate on solving complex problems that matter from autonomous vehicles, drones and factories to augmented reality and remote healthcare. ADI fosters a culture that focuses on employees through beneficial programs, aligned goals, continuous learning opportunities, and practices that create a more sustainable future.