Detection Engineer

Terralogic; Bengaluru; On-site; INR 1,200,000 - 1,600,000; Full time

Job summary

Terralogic Software Solutions in Bangalore is seeking a Detection Engineer (L2/L3) with 4–8 years of experience to join our security team. You will design and tune advanced detection rules, and drive MITRE ATT&CK mappings.

You will mentor SOC analysts, provide high-level support, and work across endpoints, network, cloud, and identity logs to uncover adversary activity. Experience with Sentinel, Splunk, QRadar, or Stellar Cyber is essential.

Qualifications

• 4–8 years of experience in detection engineering.
• Hands-on with SIEM platforms (Sentinel, Splunk, QRadar).
• Experience onboarding and parsing log sources.

Responsibilities

• Design, build, and tune advanced detection rules and use cases.
• Create correlation rules across endpoints, network, cloud, and identity logs.
• Map threat techniques to MITRE ATT&CK framework.
• Test and simulate attacks to validate rules and uncover gaps.
• Provide L2/L3 SOC support and mentorship.
• Reduce false positives through continuous tuning.

Skills

SIEM Expertise

Threat Detection

Mentorship

Incident Response

Tools

Microsoft Sentinel

Splunk

QRadar

Stellar Cyber

Job description

Are you ready to outsmart cyber adversaries and build the future of threat detection?

At Terralogic Software Solutions, we don't just wait for threats to happen—we engineer the systems that stop them in their tracks. We are looking for a passionate Detection Engineer (L2/L3) with 4 to 8 years of experience to join our team in Bangalore.

If you are a cyber defender who loves dissecting attack patterns, turning chaotic log data into brilliant detection rules, and acting as the ultimate technical mentor for a SOC team, this is your next big move.

What You’ll Do (The Mission)

• Engineer the Shield: Design, build, and fine-tune advanced detection rules and SIEM use cases to catch sophisticated threats before they make a move.
• Connect the Dots: Create complex correlation rules across endpoints, network, cloud, and identity logs to unmask hidden adversary behavior.
• Map the Battleground: Translate the latest real-world threat intelligence and emerging attack techniques straight into the MITRE ATT&CK framework.
• Break and Validate: Actively test and simulate attacks to validate your rules, finding security gaps before hackers do.
• Be the Ultimate SME: Provide high-level L2/L3 support to help the SOC team crack complex investigations, and share your wisdom through mentorship and documentation.
• Keep it Clean: Continuous tuning to eliminate frustrating false positives, ensuring our analysts only focus on high-fidelity, high-impact alerts.

Who You Are (The Toolkit)

• The SIEM Specialist: You have solid, hands-on experience with powerhouse platforms like Microsoft Sentinel, Splunk, QRadar, or Stellar Cyber.
• The Log Whisperer: You are fluent in query languages like KQL, SPL, AQL, or Sigma, and you know exactly how to onboard and parse new log sources.
• The Threat Hunter Mindset: You possess a deep understanding of network, firewall, cloud, and identity telemetry, coupled with sharp troubleshooting instincts.
• Bonus Points: If you bring experience with EDR/XDR and SOAR automation tools to the table, we definitely want to chat!

Why Terralogic?

You will be at the heart of our security operations, given the creative freedom to design cutting-edge defenses and directly impact our clients' safety. We offer a collaborative, fast-paced environment where your technical expertise is celebrated, and your career growth is prioritized.

Ready to level up your engineering career?