SOC Engineer

MAHLE; Maharashtra; On-site; INR 1,600,000 - 2,600,000; Full time

Job summary

MAHLE in Maharashtra, India is seeking a security engineer with 5+ years in SIEM/SOAR or threat detection to join our SOC. You will work on detection engineering, automation use cases, threat intel integration, and collaborate with an international team.

The role emphasizes data normalization, correlation, and setting up defenses using Splunk, Cortex, and EDR tools. A Bachelor’s in CS or Cybersecurity and security certifications are preferred.

Qualifications

• Bachelor’s degree in Computer Science or Cybersecurity
• IT Security certification is advantageous
• Design, develop and improve threat detection and automation use cases
• Optimize data normalization, correlation and threat intelligence integration
• Collaborate closely with SOC peers and SOC Manager for continuous improvement

Responsibilities

• Design, develop and improve threat detection and automation use cases
• Optimize data normalization, correlation, enrichment and threat intelligence integration
• Optimize existing SOC technology stack and architecture as well as DevOps processes
• Collaborate closely with SOC Engineer peers, SOC Analysts, and SOC Manager for continuous improvement
• Regularly collaborate with internal and external IT service providers

Skills

SIEM/SOAR/Threat Detection

Threat Intelligence

SOC experience

Critical thinking

Independent learning

Team collaboration (intl)

Python scripting

Data structures from log sources

Education

Bachelor's degree in Computer Science or Cybersecurity

IT security certification (advantage)

Tools

Splunk

Cortex

EDR

GitLab

Job description

• Experience as SIEM, SOAR or Threat Detection Engineer (minimum of 5 years)
• SOC experience, ideally with SIEM, SOAR, Threat Detection, and Threat Intelligence areas
• Critical thinking with a methodical, proactive and organized approach to work, combined with an aptitude for detail and accuracy
• Ability to work independently and learn proactively
• Constructive team spirit, creative and good communication and collaboration skills in an international environment
• Strong understanding of threat detection, threat intelligence and security frameworks (e.g. MITRE ATT&CK, Cyber Kill Chain)
• Advanced knowledge in SIEM and SOAR (e.g., Splunk, Cortex), EDR and threat intelligence services
• Good knowledge of data structure from various log sources (e.g. EDR, network, identity, application, cloud, …)
• Strong experience in programming / scripting (e.g. Python) as well as in version control (e.g. GitLab).

Your Contribution

• Experience as SIEM, SOAR or Threat Detection Engineer (minimum of 5 years)
• SOC experience, ideally with SIEM, SOAR, Threat Detection, and Threat Intelligence areas
• Critical thinking with a methodical, proactive and organized approach to work, combined with an aptitude for detail and accuracy
• Ability to work independently and learn proactively
• Constructive team spirit, creative and good communication and collaboration skills in an international environment
• Strong understanding of threat detection, threat intelligence and security frameworks (e.g. MITRE ATT&CK, Cyber Kill Chain)
• Advanced knowledge in SIEM and SOAR (e.g., Splunk, Cortex), EDR and threat intelligence services
• Good knowledge of data structure from various log sources (e.g. EDR, network, identity, application, cloud, …)
• Strong experience in programming / scripting (e.g. Python) as well as in version control (e.g. GitLab).

Your Experience And Qualification

• Bachelor’s degree in Computer Science or Cybersecurity
• Any certification in area of IT Security is of advantage

Minimum Requirements

• Design, develop and improve threat detection and automation use cases
• Optimize data normalization, correlation, enrichment and threat intelligence integration
• Optimize existing SOC technology stack and architecture as well as DevOps processes.
• Collaborate closely with SOC Engineer peers, SOC Analysts, and SOC Manager for continuous improvement.
• Regularly collaborate with internal and external IT service providers (e.g. new requirements, troubleshooting, …)

Our Offering.

We will provide a collaborative environment working on exciting assignments, along with ongoing personal & career development opportunities.

#DiversityMatters

with our inclusive culture, we welcome applications from all social, religious & ethnical backgrounds, disabilities both mental and physical, identities (gender) and neurodivergent people.

Do you have any questions?