Sr IT Security Analyst-SIEM Detection Engineering New

NetVerks Inc.; Hyderabad; Hybrid; INR 900,000 - 1,800,000; Full time

Job summary

Mattel is seeking a security engineering expert to architect, implement, and maintain SIEM/NDR across on-prem and cloud environments. You will develop detection rules, integrate with SOAR, and drive incident response workflows in a fast-paced global setting.

The role emphasizes collaboration with SOC, IT, and security teams, seeking candidates with strong scripting, MITRE ATT&CK knowledge, and experience across Azure, AWS, and GCP.

Qualifications

• 5–8 years of experience in security engineering or SOC architecture
• Expert-level knowledge of SIEM platforms and onboarding
• Strong understanding of detection engineering and MITRE ATT&CK
• Experience with log source onboarding (firewalls, proxies, endpoints, cloud, identity, email systems)
• Familiarity with SOAR and automation workflows
• Strong scripting skills (Python, PowerShell, Bash)
• Understanding of cloud detection across Azure, AWS, or GCP environments
• Excellent analytical and communication skills with a data-driven mindset
• SIEM engineering and administration (Splunk, Sentinel)
• Log collection, parsing, and correlation logic development
• NDR/XDR deployment and tuning (ExtraHop, Vectra, Cisco, CrowdStrike)
• Detection engineering and content lifecycle management
• MITRE ATT&CK and D3FEND familiarity
• Network security, endpoint telemetry, and identity-based detection

Responsibilities

• Architect, implement, and maintain SIEM infrastructure for reliable log ingestion, parsing, correlation, and alerting across enterprise systems
• Develop and fine-tune detection content and analytics rules to identify suspicious or malicious activity across endpoints, networks, and cloud environments
• Manage and enhance NDR and XDR platforms, integrating telemetry for end-to-end visibility
• Partner with the SOC and Incident Response teams to improve alert fidelity, reduce false positives, and accelerate investigation workflows
• Integrate SIEM with SOAR and automation pipelines to support rapid response and consistent case handling
• Collaborate with infrastructure and application teams to ensure comprehensive log coverage and compliance with data retention and privacy requirements
• Develop and maintain dashboards, metrics, and reporting to measure detection performance and operational efficiency
• Conduct periodic health checks, tuning, and performance optimization for SIEM and NDR solutions
• Maintain detailed documentation, playbooks, and SOPs supporting SIEM and NDR operations

Skills

SIEM platforms

Detection engineering

Log onboarding

SOAR & automation

Scripting (Python/PowerShell/Bash)

Cloud detection (Azure/AWS/GCP)

Data normalization

NDR/XDR tools

SIEM administration

MITRE ATT&CK knowledge

Education

Bachelor’s degree in Cybersecurity/CS

Certifications (GCDA/GSOC/CySA+/SSCP/Splunk Admin)

Tools

Splunk

XSOAR

ExtraHop

Vectra

Cisco

CrowdStrike

Azure

AWS

GCP

Job description

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at…

Job Description

Roles and Responsibilities

• Architect, implement, and maintain SIEM infrastructure to ensure reliable log ingestion, parsing, correlation, and alerting across enterprise systems.
• Develop and fine-tune detection content and analytics rules to identify suspicious or malicious activity across endpoints, networks, and cloud environments.
• Manage and enhance Network Detection and Response (NDR) and Extended Detection and Response (XDR) platforms, integrating telemetry for end-to-end visibility.
• Partner with the SOC and Incident Response teams to improve alert fidelity, reduce false positives, and accelerate investigation workflows.
• Integrate SIEM with SOAR and automation pipelines to support rapid response and consistent case handling.
• Collaborate with infrastructure and application teams to ensure comprehensive log coverage and compliance with data retention and privacy requirements.
• Develop and maintain dashboards, metrics, and reporting to measure detection performance and operational efficiency.
• Conduct periodic health checks, tuning, and performance optimization for SIEM and NDR solutions.
• Maintain detailed documentation, playbooks, and SOPs supporting SIEM and NDR operations.

Skills and Qualifications

Required

• 5–8 years of experience in security engineering, detection engineering, or SOC architecture in an enterprise environment.
• Expert-level knowledge of SIEM platforms (e.g., Splunk, XSOAR, or equivalent), including onboarding, parsing, rule creation, and optimization.
• Strong understanding of detection engineering, including attack chain mapping, MITRE ATT&CK coverage, and event correlation.
• Experience with log source onboarding (firewalls, proxies, endpoints, cloud, identity, email systems etc.).
• Familiarity with SOAR tools and automation workflows for triage and enrichment.
• Strong scripting skills (Python, PowerShell, or Bash) for rule automation, parsing, and enrichment.
• Understanding of cloud detection engineering across Azure, AWS, or GCP environments.
• Excellent analytical, problem-solving, and communication skills, with a focus on collaboration and data-driven decision-making.
• SIEM engineering and administration (Splunk, Sentinel, etc.)
• Log collection, parsing, and correlation logic development
• NDR/XDR deployment and tuning (e.g., ExtraHop, Vectra, Cisco, CrowdStrike, or similar)
• Detection engineering and content lifecycle management
• Cloud detection coverage (Azure, AWS, GCP)
• Scripting and automation (Python, PowerShell, Bash)
• SOAR integration for alert enrichment and response automation
• Data normalization, threat hunting, and query development
• Familiarity with the MITRE ATT&CK and D3FEND frameworks
• Network security, endpoint telemetry, and identity-based detection techniques

Preferred

• Bachelor’s degree in Cybersecurity, Computer Science, or related technical field, or equivalent professional experience.
• Demonstrated success designing, scaling, and maintaining enterprise SIEM and detection systems.
• Certifications such as GIAC Certified Detection Analyst (GCDA), GIAC Security Operations Certified (GSOC), CompTIA CySA+, ISC2 SSCP, Splunk Enterprise Security Certified Admin or Architect, or equivalent detection engineering or SIEM certification
• Analytical and detail-oriented with a focus on precision and reliability
• Strong communication and collaboration across technical and non-technical stakeholders
• Adaptable and proactive in a fast-paced, global environment
• Passion for continuous learning, innovation, and automation in security operations
• Effective mentor and team contributor

Shift Timing

Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events.

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Who We Are

Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Videos to watch

• The Culture at Mattel
• Corporate Philanthropy

Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.