Detection Engineer

Tata Consultancy Services; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Tata Consultancy Services, Chennai, is seeking a security professional to design and tune detections across SIEM, EDR, NDR, and XDR platforms. The role focuses on mapping detections to MITRE ATT&CK techniques, analyzing logs, and collaborating with SOC and IR teams to improve coverage and reduce false positives.

The candidate will model threats, identify detection gaps, and advance detection-as-code practices with automation wherever applicable, while integrating threat intelligence to enhance

Qualifications

• Experience designing and tuning detections across SIEM, EDR, NDR, and XDR platforms.
• Ability to map detections to MITRE ATT&CK techniques.
• Experience analyzing logs from endpoints, cloud, and network.
• Collaborate with SOC and IR teams to improve coverage and reduce false positives.
• Threat modeling and identifying detection gaps from emerging threats.
• Automation of deployment pipelines and detection-as-code practices.

Responsibilities

• Design, develop, and optimize detection use cases for SIEM, EDR, NDR, and XDR platforms.
• Create and maintain detection rules, correlation logic, alert tuning, and behavioral analytics.
• Map detections to MITRE ATT&CK techniques and adversary tactics.
• Analyze logs and telemetry from endpoints, cloud, identity, network, and security tools.
• Collaborate with SOC and Incident Response teams to improve detection coverage and reduce false positives.
• Conduct threat modeling and identify detection gaps based on emerging threats.
• Develop detection-as-code methodologies and automate deployment pipelines where applicable.
• Support threat hunting initiatives by creating advanced detection logic.
• Integrate threat intelligence feeds into detection mechanisms.
• Perform continuous tuning and validation of alerts and detection content.

Skills

Threat detection

ATT&CK mapping

SOC collaboration

Alert tuning

Threat intel integration

Detections as code

Job description

• Design, develop, and optimize detection use cases for SIEM, EDR, NDR, and XDR platforms.
• Create and maintain detection rules, correlation logic, alert tuning, and behavioral analytics.
• Map detections to MITRE ATT&CK techniques and adversary tactics.
• Analyze logs and telemetry from endpoints, cloud, identity, network, and security tools.
• Collaborate with SOC and Incident Response teams to improve detection coverage and reduce false positives.
• Conduct threat modeling and identify detection gaps based on emerging threats.
• Develop detection-as-code methodologies and automate deployment pipelines where applicable.
• Support threat hunting initiatives by creating advanced detection logic.
• Integrate threat intelligence feeds into detection mechanisms.
• Perform continuous tuning and validation of alerts and detection content.