India CoE IAM Engineer, ITDR (Identity Threat Detection and Response)

IdentityLogic Consulting LLC; Bengaluru; Hybrid; INR 1,500,000 - 2,800,000; Full time

Benefits offered by this job

Performance bonus

Certifications sponsorship

Conference sponsorship

Job summary

IdentityLogic Consulting LLC seeks a Bengaluru-based India CoE engineer focused on identity threat detection and response. You will deploy, tune, and operate ITDR controls, and build detections and response playbooks for identity-based attacks across client environments.

Candidates should have 4+ years in security engineering with identity-focused detection, hands-on with ITDR or identity-aware EDR, and familiarity with AD, Entra ID, SIEM and SOAR tooling.

Qualifications

• 4+ years security engineering experience with identity-focused detection and response.
• Hands-on with at least one major ITDR or identity-aware EDR platform.
• Working knowledge of Active Directory, Microsoft Entra ID, and common identity attack patterns.
• Familiarity with SIEM (Splunk, Sentinel, QRadar) and SOAR (XSOAR, Tines) tooling.
• Comfortable working with US clients during India morning hours.

Responsibilities

• Deploy and tune ITDR platforms (Silverfort, SentinelOne Singularity Identity, CrowdStrike Falcon Identity, Microsoft Defender for Identity, or similar).
• Build identity threat detection use cases and response playbooks.
• Integrate ITDR with SIEM, SOAR, and IAM platforms for closed-loop response.
• Triage identity-based attacks: Kerberoasting, AS-REP roasting, Golden Ticket, lateral movement.
• Tune detections; reduce false positives; document response procedures.
• Coordinate with client SOC teams during overlap hours.

Skills

Identity threat detection

Incident response

SIEM

SOAR

Active Directory

Entra ID

EDR platforms

US client communication

Tools

Splunk

Sentinel

QRadar

XSOAR

Tines

Job description

India CoE engineer focused on identity threat detection and response. Deploy, tune, and operate ITDR controls; build detections and response playbooks for identity-based attacks across client environments.

Responsibilities

• Deploy and tune ITDR platforms (Silverfort, SentinelOne Singularity Identity, CrowdStrike Falcon Identity, Microsoft Defender for Identity, or similar)
• Build identity threat detection use cases and response playbooks
• Integrate ITDR with SIEM, SOAR, and IAM platforms for closed-loop response
• Triage identity-based attacks: Kerberoasting, AS-REP roasting, Golden Ticket, lateral movement
• Tune detections; reduce false positives; document response procedures
• Coordinate with client SOC teams during overlap hours

Requirements

• 4+ years security engineering experience with at least 2 years on identity-focused detection and response
• Hands-on with at least one major ITDR or identity-aware EDR platform
• Working knowledge of Active Directory, Microsoft Entra ID, and common identity attack patterns
• Familiarity with SIEM (Splunk, Sentinel, QRadar) and SOAR (XSOAR, Tines) tooling
• Comfortable working with US clients during India morning hours
• Based in India with eligibility to work for an India-registered entity

Nice to have

• GCIH, OSCP, or equivalent offensive or DFIR certification
• Prior incident response experience involving identity-based attacks
• Experience building detection content from threat intelligence

Compensation and benefits

Competitive India-market base plus performance bonus. Paid certifications and conference sponsorship.