Senior Detection & Alerting Engineer Mudals Technologies Pvt Ltd Secure. Scalable. Strategic. IT Solutions That Work

Mudals Technologies Pvt. Ltd.; Hyderabad; Presencial; INR 2.600.000 - 4.200.000; Tempo integral

Resumo da vaga

Mudals Technologies Pvt. Ltd. in Hyderabad, on-site, seeks a Senior Detection & Alerting Engineer to build and mature enterprise threat detection capabilities. The role emphasizes reliable, high-quality detections and progress toward behavioral and AI-assisted detection.

You will design detections across endpoints, networks, identity, and cloud, map them to MITRE ATT&CK, tune rules, reduce false positives, and automate warning workflows in a fast-paced security operations environment.

Qualificações

• 5–8 years of cybersecurity experience with hands-on detection engineering, SIEM, threat hunting, or SOC.
• Hands-on with at least one SIEM platform: Microsoft Sentinel, Splunk, IBM QRadar, or Elastic.
• Proficiency in SIEM query languages (KQL or SPL) and tuning rules.
• Strong knowledge of MITRE ATT&CK, Windows security, AD/identity, endpoint, network, and cloud security.
• Experience with log onboarding, detection validation, event correlation, and false-positive reduction.
• Strong analytical and troubleshooting skills; able to collaborate across SOC, IR, Threat Intelligence, Cloud, and Infra teams.

Responsabilidades

• Design, develop, test, deploy, and maintain detection rules across endpoints, network, identity, cloud, and SaaS.
• Map detections to MITRE ATT&CK and turn threat intel into actionable detections.
• Manage detection content and correlation rules; onboard/validate log sources.
• Test and review detection logic; reduce false positives; tune or retire rules.
• Measure detection effectiveness and automate repetitive detection/investigation workflows.
• Develop behavioral and risk-based detections; support UEBA and AI-assisted alert triage.

Conhecimentos

Detection engineering

SIEM engineering

Threat hunting

Security operations

KQL/SPL

Formação

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Ferramentas

Microsoft Sentinel

Splunk

IBM QRadar

Elastic Security

Descrição da vaga

Senior Detection & Alerting Engineer

Experience: 5–8 Years

Location: Hyderabad, India (On-site)
Function: Cybersecurity / Security Engineering
Employment Type: Full-Time
Role: Senior Detection & Alerting Engineer

Role Overview

We are looking for a Senior Detection & Alerting Engineer to build, enhance, and mature our enterprise threat detection capabilities. The role will focus on reliable, measurable, high-quality detections and progressively advance toward behavioral, risk-based, automated, and AI-assisted detection.

Key Responsibilities

• Detection Engineering: Design, develop, test, deploy, and maintain detection rules and use cases across endpoint, network, identity, cloud, SaaS, and application environments.
• Threat Detection & Coverage: Map detections to MITRE ATT&CK, identify coverage gaps, and turn threat intelligence, incident findings, and adversary TTPs into actionable detections.
• SIEM & Log Engineering: Manage detection content and correlation rules; onboard and validate log sources; troubleshoot ingestion, parsing, normalization, and data-quality issues.
• Alert Quality & Validation: Test and review detection logic, reduce false positives, improve alert fidelity, and tune or retire ineffective rules.
• Performance & Automation: Measure detection effectiveness and MTTD, improve alert prioritization and contextual enrichment, and automate repetitive detection and investigation workflows.
• Advanced Detection: Develop behavioral and risk-based detections, support UEBA, and contribute to AI-assisted alert triage, detection engineering, and predictive risk analytics.

Required Skills & Experience

• 5–8 years of cybersecurity experience, with hands-on work in detection engineering, SIEM engineering, threat hunting, or security operations.
• Practical experience with at least one SIEM platform: Microsoft Sentinel, Splunk, IBM QRadar, or Elastic Security.
• Proficiency in at least one SIEM query language, such as KQL or SPL, and experience developing and tuning detection rules.
• Good understanding of MITRE ATT&CK, Windows security, Active Directory/identity, endpoint, network, and cloud security.
• Experience with log onboarding, detection validation, event correlation, false-positive reduction, and detection-gap analysis.
• Strong analytical and troubleshooting skills, with the ability to collaborate across SOC, Incident Response, Threat Intelligence, Cloud, and Infrastructure teams.

Preferred Skills

• Detection-as-Code, Sigma, EDR/XDR, UEBA, SOAR, threat intelligence integration, or adversary simulation.
• Exposure to AI/ML-driven security analytics, automated detection testing, or risk-based alerting.

Qualifications

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.