Senior CyberSecurity Engineer (India)

Rearc LLC; Pune District, Bengaluru; Híbrido; INR 1.500.000 - 2.600.000; Jornada completa

Descripción de la vacante

Rearc is seeking a Cybersecurity Threat Detection Engineer to design and evangelize cybersecurity services for our customers. The role emphasizes DevSecOps, Detection-As-Code, and purple team expertise with an entrepreneurial spirit.

You will use SIEM, SOAR, EDR and NDR technologies to build tailored detections, craft automation playbooks, and collaborate with client CSOC/OT/IR teams to strengthen enterprise security postures.

Formación

• 5-8 years of experience in Cybersecurity with emphasis on: log streaming, data lakes/dw, SOAR, SIEM, data science and threat detection
• Bachelor's degree in MIS, CS, or related field
• Strong drive to stay current with industry trends and cyber tools
• Proficiency in Python, SQL and Apache Spark
• Ability to document, socialize and operationalize cybersecurity technologies and processes

Responsabilidades

• Build threat detection with NDR/EDR/SIEM and real-time data streaming
• Develop and refine detection rules based on real-time data
• Design data enrichment pipelines and automated workflows
• Create correlation logic and automated high-fidelity threat alerts
• Ensure compliance and recoverability of customer data analytics solutions
• Develop automation playbooks for incident triage and response
• Align content with customer use case frameworks and report threat metrics
• Collaborate with customer cybersecurity teams to close security gaps
• Build dashboards and exploration tools for Cybersecurity, IT and OT teams
• Stay updated on emerging threats and adapt detection strategies

Conocimientos

Cloud fundamentals

SIEM engineering

Data streaming

Data engineering

Python

SQL

Apache Spark

Cross-functional collaboration

Educación

Bachelor's degree in MIS/CS

Herramientas

Databricks

Cribl

Tines

Descripción del empleo

At Rearc, we're committed to empowering engineers to build awesome products and experiences. Success as a business hinges on our people's ability to think freely, challenge the status quo, and speak up about alternative problem-solving approaches. If you're driven by the desire to solve problems and make a difference, you're in the right place!

Our approach is simple: empower our people with the best tools possible to make an impact within their industry. We're on the lookout for people who thrive on ownership and freedom, possessing not just technical depth but also executive presence and business judgment.

Founded in 2016, we pride ourselves on fostering an environment where creativity flourishes, bureaucracy is minimal, and individuals are encouraged to challenge the status quo. We're not just a company; we're a community of problem-solvers dedicated to improving the lives of fellow software engineers and the customers we serve.

Role Overview

Rearc is seeking a Cybersecurity Threat Detection Engineer who is passionate about developing and evangelizing cybersecurity services. The ideal candidate will have strong communication skills, a solid foundation in DevSecOps and Detection-As-Code, deep purple team expertise, and an entrepreneurial spirit. Join our dynamic Cybersecurity practice to design and implement advanced detection strategies for our customers, supporting robust and modern cybersecurity monitoring programs. You will leverage SIEM, SOAR, EDR, and NDR services to build tailored security detections that strengthen our clients' defenses.

What You Bring

• Genuine enthusiasm for advancing services in the cybersecurity sector

• Solid fundamentals in cloud, security, SIEM, and data engineering

What You'll Do

• Utilize NDR, EDR, real-time streaming, and SIEM technologies to build resilient threat detection capabilities

• Develop and fine-tune detection rules informed by real-time data streaming, enhancing detection accuracy

• Design data enrichment pipelines and automated workflows to improve threat detection precision

• Create correlation logic and automated processes for generating high-fidelity threat alerts

• Ensure compliance and recoverability of customer data analytics solutions through SOPs, onboarding, normalization, enrichment, and system maintenance

• Develop automation playbooks for efficient incident triage and response

• Align detection content with customer-specific use case frameworks and report metrics on current cybersecurity threats

• Collaborate closely with customer cybersecurity teams to identify and close security gaps, enhancing enterprise security posture

• Build dashboards and data exploration tools to support Cybersecurity, IT, and OT teams

• Stay up to date on emerging cyber threats and trends, adapting detection strategies as the landscape evolves

• Work hand-in-hand with CSOC, OT, and Incident Response (IR) teams to ensure that detections are actionable and relevant

• Gather feedback to continually improve security frameworks and monitoring strategies

You will combine in-depth technical skills with a strong awareness of emerging threats, driving customer success and innovation in cybersecurity.

Qualifications

• 5-8 years of experience in Cybersecurity, with emphasis on:

  • Log streaming

  • Cybersecurity data lakes and data warehousing

  • SOAR engineering

  • SIEM engineering, administration, architecture, and operations

  • Data science, statistical analysis, and threat detection development

  • Integration of IT, OT, and business applications into SIEM environments

• Bachelor's degree in Management Information Systems, Computer Science, or a related field

• Strong drive to stay current with industry trends, best practices, and cyber tools

• Proven experience documenting, socializing, and operationalizing cybersecurity technologies and processes

• Programming proficiency in Python, SQL, and Apache Spark

• Deep understanding of common attack techniques and their real-world applications

• Demonstrated ability to work collaboratively across multidisciplinary teams

• Self-starter with a track record of thriving in fast-paced environments

• Excellent verbal and written technical communication skills

Nice to Have:

• Experience with platforms such as Databricks, Cribl, Tines, or other cybersecurity lakehouse providers

Rearc is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. All employment decisions at Rearc are based on business needs, job requirements, and individual qualifications.