Security Engineer - Detection & Response /SIEM & SOAR

Cerebra; Chennai District; Presencial; INR 1 800 000 - 3 600 000; Tempo integral

Resumo da oferta

Cerebra seeks an experienced Security Engineer (Detection & Response) to join our Chennai team. You will work with SIEM, SOAR, and EDR/XDR telemetry to detect, investigate, and respond to threats, leveraging MITRE ATT&CK and modern security tooling.

The role requires 7–12 years of hands-on security operations experience, strong scripting in Python, and the ability to implement Detection-as-Code workflows. This is an on-site position in Chennai for immediate/short-notice hiring with a global MNC

Qualificações

• 7–12 years of experience in security engineering or similar role.
• Experience with SIEM platforms and SOAR workflows.
• Proficient in detection engineering, threat hunting, and telemetry analysis.

Conhecimentos

SIEM

Google SecOps/Chronicle

Splunk

Microsoft Sentinel

Detection Engineering

YARA-L

Sigma

SPL

KQL

SOAR

Threat Hunting

Security Telemetry

Python

MITRE ATT&CK

Ferramentas

Google Chronicle

Splunk

Microsoft Sentinel

Siemplify

Phantom

Cortex XSOAR

Logstash

Fluent Bit

Pub/Sub

Descrição da oferta de emprego

Immediate /Short Notice Only - Cerebra Payroll - MNC Client

[e-mail]

Only Whatsapp: [phone]

Security Engineer Detection & Response / SIEM & SOAR

Experience: 7 TO 12 Years
Location: CHENNAI

Skills: SIEM, Google SecOps/Chronicle, Splunk, Sentinel, Detection Engineering, YARA-L, Sigma, SPL, KQL, SOAR, Threat Hunting, Security Telemetry, Python, MITRE ATT&CK.

Key Requirements:

• Google SecOps/Chronicle, Splunk or Microsoft Sentinel
• SIEM parsing, UDM mapping, indexing and search optimization
• Detection-as-Code using YARA-L, Sigma, SPL or KQL
• Detection CI/CD and automated validation
• SOAR: Google SecOps SOAR/Siemplify, Splunk SOAR/Phantom or Cortex XSOAR
• Python and REST API automation
• Hypothesis-driven threat hunting
• BindPlane, OpenTelemetry, Logstash, Fluent Bit, Pub/Sub/Event Hubs
• MITRE ATT&CK, D3FEND and Cyber Kill Chain
• GTI/STIX/TAXII
• AI/LLM security operations preferred
• EDR/XDR and network telemetry preferred