Threat Detection Engineer

Millennium Management LLC; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Millennium SOC in Bengaluru seeks a Threat Detection Engineer to hunt threats, design detections, and automate responses across security domains. The role requires strong scripting skills and hands-on experience with AD/Entra, GPO, Intune, and cloud security tools.

You will lead incident response activities, collaborate with cross-functional teams, and translate complex security concepts for stakeholders in a fast-paced environment.

Qualifications

• Bachelors/Masters in CS or cyber security.
• 48let
• 3+ years in a security engineering role, financial industry experience preferred.
• Experience creating detections in KQL, SQL, SPL.
• Security certifications: Security+, OSCP, CISSP, CEH, GCIA, GCIH.
• Experience with modern security tooling across security domains: network, endpoint, data, identity and cloud.
• Experience with AD, Entra, Group Policy, Intune, DNS, TCP/IP, PKI, Microsoft 365, Windows, Linux, MacOS.
• Ability to handle sensitive materials with discretion.
• Scripting, development and automation using PowerShell or Python.

Responsibilities

• Threat Hunting across multiple data sources to identify evolving threats.
• Design and operate high-fidelity detections and response mechanisms.
• Own, operate and automate detection and response playbooks.
• Lead information security response activities for the firm.
• Collaborate across business and technology teams to deliver outcomes.
• Explain complex security topics to a wide range of stakeholders.
• Monitor new security trends and assess applicability to Millennium initiatives.
• Ensure security capabilities remain fit for purpose and evolve.

Skills

Threat Hunting

Detection Engineering

Playbook Automation

Security Response

Scripting (PowerShell/Python)

Threat Intel

Team Collaboration

Technical Communication

Education

Bachelor's/Master's in CS or Cyber Security

Tools

Active Directory

Entra

Group Policy

Intune

DNS

PKI

Microsoft 365

Job description

Threat Detection Engineer

Do you have a passion for hunting malicious activities in the background of business as usual and figuring out how to detect and respond to new threats?

Millennium SOC is going through a transformation, we are looking for an experienced Threat Detection Engineer to drive our best-in-class posture. This is highly technical role, and a successful candidate would have demonstrable knowledge and experience in a range of technologies both business and security in a fast pace innovative organisation.

Principal Responsibilities

• Threat Hunting – The ability to leverage multiple data sources to identify modern evolving threats and develop new detection and response approaches.
• Detection Engineering – Creation and operation of high-fidelity detections mechanisms that drive efficient, effective and repeatable response.
• Playbook Creation – Own, operate and automate detection and response workflows, that enable the team to focus on strategic objectives.
• Lead Information Security response activities for the firm.
• Team Player – Ability to work across business and technology teams to deliver positive outcomes across the firm.
• Technical Prowess – Comfortable explaining complex technology and information security related concepts to a wide range of stakeholders.
• Security Ambassador - Enforce security policies and procedures by administering and monitoring appropriate systems, events and answering stakeholder queries.
• Threat Intel - Actively monitor new and emerging security and privacy related technologies, trends, issues, and solutions and assess their applicability to Millennium key business initiatives and business strategies.
• Operational Excellence – Ensure Millennium Information Security capabilities remain fit for purpose and evolve to meet the changing threat landscape.

Qualifications / Skills Required

• Bachelor or master’s degree in computer science or cyber security with strong IT background or equivalent demonstrable experience.
• 3 years’ experience working in a security engineering role, financial industry experience preferred.
• Experience in creating detections in modern query languages (KQL, SQL, SPL).
• Possesses security certifications (Security+, OSCP, CISSP, CEH, GCIA, GCIH).
• Experience with modern security tooling across security domains; network, endpoint, data, identity and cloud.
• Experience in standard enterprise technology stack, Active Directory, Entra, Group Policy, Intune, DNS, TCP/IP, PKI, Microsoft 365, Windows, Linux, MacOS, etc.
• Ability to handle sensitive and/or confidential materials with appropriate discretion.
• Required scripting, development and automation skills using PowerShell or Python and proficient development tools.
• Experience in OSINT, Threat hunting and analysing malicious emails.
• Able to prioritize in a fast moving, high pressure, constantly changing environment.