Cybersecurity Data/ Detection/ Implementation Engineer

Kaizen Sra Technologies; Hyderabad, Bengaluru; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Kaizen Sra Technologies seeks a Cybersecurity Detection and Implementation Engineer with 7+ years of experience to design, implement, and optimize detection capabilities. You will craft YARA rules, use MITRE ATT&CK as a guide, and work with customers to tailor security solutions across SIEM platforms such as Splunk, ELK, or QRadar.

You will collaborate with teams to analyze threats, develop use cases for cloud, identity, endpoint, and data exfiltration, and support incident response with deep

Qualifications

• Bachelor's degree in CS, Information Security, or a related field.
• 3+ years in cybersecurity focusing on detection engineering and implementation.
• Proficiency in creating and maintaining YARA rules for threat detection.
• Solid understanding of MITRE ATT&CK and related detection rule development.
• Knowledge of data ingestion techniques, log management, and data lakes.
• Experience developing use cases for Cloud, Identity, Endpoint and Data Exfiltration.
• Hands-on with SIEM solutions such as Splunk, ELK, or QRadar.
• Strong analytical and communication skills; certifications are a plus.

Responsibilities

• Design, develop, and maintain YARA rules for threat detection and malware analysis.
• Research threats and identify proactive detection mechanisms.
• Develop detection use cases based on MITRE ATT&CK.
• Optimize detection rules to reduce false positives and improve efficiency.
• Collaborate with cross-functional teams to tailor cybersecurity solutions.
• Participate in security incident response activities with technical support.
• Stay updated on trends, technologies, and best practices in cybersecurity.
• Work with customers to understand security challenges and provide guidance.

Skills

YARA rules

Detection engineering

MITRE ATT&CK

Data ingestion

SIEM tools

Cloud use cases

Endpoint use cases

Education

Bachelor's degree in CS or Info Security

Tools

Splunk

ELK

QRadar

Job description

Cybersecurity Data/ Detection/ Implementation Engineer (Senior Analyst / Leads)

Experience: 7+ Years Hyderabad/Bangalore

Job Summary

We are seeking a skilled and experienced Cybersecurity Detection and Implementation Engineer with expertise in YARA rules creation, playbook implementation, and data ingestion techniques. This role presents an exciting opportunity to contribute to the design and implementation of cutting-edge cybersecurity solutions while collaborating with a talented team of professionals.

Responsibilities

• Design, develop, and maintain YARA rules for threat detection and malware analysis, ensuring high accuracy and effectiveness.
• Conduct research and analysis to identify emerging threats and vulnerabilities and develop proactive detection mechanisms.
• Identify and implement detection use cases based on emerging threats and TTPs using MITRE ATT&CK framework.
• Contribute to optimization of detection rules to eliminate false positives and improve detection efficiency.
• Collaborate with cross-functional teams to understand customer requirements and customize cybersecurity solutions to meet their needs.
• Participate in security incident response activities, providing technical expertise and support as needed.
• Stay abreast of the latest cybersecurity trends, technologies, and best practices, and share knowledge with the team.
• Work closely with customers to understand their security challenges and requirements and provide expert guidance and support.

Qualifications

• Bachelors degree in computer science, Information Security, or related field.
• 3 years of experience in cybersecurity, with a focus on detection engineering and implementation.
• Proficiency in creating and maintaining YARA rules for threat detection and malware analysis.
• Solid understanding of MITRE ATT&CK framework and developing detection rules based on it.
• Solid understanding of data ingestion techniques and technologies, including log management systems and data lakes.
• Knowledge and experience in developing use cases for Cloud, Identity, Endpoint and Data Exfiltration use cases.
• Hands-on experience with SIEM (Security Information and Event Management) solutions such as Splunk, ELK, or QRadar.
• Excellent analytical and problem-solving skills, with the ability to troubleshoot complex technical issues.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with internal teams and customers.
• Relevant cybersecurity certifications (e.g., CISSP, CEH, GIAC) are a plus.