Cyber Defense Engineer

Tata Consultancy Services; Irvine (CA); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical coverage

Parental leaves

401K plan

Performance bonus

Training reimbursement

Vacation & holidays

Job summary

Tata Consultancy Services Limited in Irvine, CA is seeking a Cyber Defense Engineer (Detection Engineering & Threat Monitoring) to design, develop, and optimize threat detection use cases and security analytics across enterprise environments.

The role requires hands-on experience with SIEMs (Splunk, Microsoft Sentinel, QRadar, Elastic), EDR/XDR (CrowdStrike, Defender, SentinelOne, Carbon Black), threat modeling, MITRE ATT&CK mapping, and strong scripting skills (KQL, SPL, Python, PowerShell,

Qualifications

• Strong experience with Detection Engineering and use case development.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic.
• Experience creating and tuning correlation rules, analytics, alerts, and dashboards.
• Strong knowledge of Threat Modeling methodologies and attack path analysis.
• Experience with Threat Hunting and proactive threat identification.
• Hands-on experience with EDR/XDR solutions such as CrowdStrike, Microsoft Defender, Sentinel One, or Carbon Black.
• Strong understanding of the MITRE ATT&CK Framework and adversary TTPs.
• Experience analyzing security logs from endpoints, networks, cloud platforms, and identity systems.
• Proficiency in one or more: KQL, SPL, Python, PowerShell, SQL.
• Experience with incident investigation and security monitoring.

Responsibilities

• Design, develop, and optimize threat detection use cases and security analytics.
• Build and maintain detection rules, correlation searches, dashboards, and alerting mechanisms across security platforms.
• Develop detection content based on threat intelligence, attack frameworks, and emerging threats.
• Conduct threat modeling exercises to identify attack paths, security gaps, and mitigation strategies.
• Perform proactive threat hunting and security monitoring across enterprise environments.
• Collaborate with SOC, Incident Response, Threat Intelligence, and Security Engineering teams to improve detection coverage.
• Map detections to MITRE ATT&CK techniques and adversary behaviors.
• Analyze security logs from endpoints, cloud environments, applications, identity platforms, and network devices.
• Continuously tune detections to minimize false positives and improve operational efficiency.
• Support security investigations, incident response, and post-incident analysis.
• Develop metrics and reporting to measure cyber defense effectiveness.

Skills

Detection engineering

Threat hunting

Threat modeling

MITRE ATT&CK

Incident investigation

Security monitoring

SQL

Python

PowerShell

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

CrowdStrike

Microsoft Defender

SentinelOne

Carbon Black

KQL

SPL

Job description

Job Description

Cyber Defense Engineer

(Detection Engineering & Threat Monitoring)

Must Have Technical/Functional Skills

• Strong experience with Detection Engineering and use case development.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or
• Elastic.
• Experience creating and tuning correlation rules, analytics, alerts, and dashboards.
• Strong knowledge of Threat Modeling methodologies and attack path analysis.
• Experience with Threat Hunting and proactive threat identification.
• Hands-on experience with EDR/XDR solutions such as CrowdStrike, Microsoft Defender,
• Sentinel One, or Carbon Black.
• Strong understanding of the MITRE ATT&CK Framework and adversary TTPs.
• Experience analyzing security logs from endpoints, networks, cloud platforms, and identity
• systems.
• Proficiency in one or more of the following: KQL, SPL, Python, PowerShell, SQL.
• Experience with incident investigation and security monitoring.

Roles & Responsibilities

• Design, develop, and optimize threat detection use cases and security analytics.
• Build and maintain detection rules, correlation searches, dashboards, and alerting mechanisms across security platforms.
• Develop detection content based on threat intelligence, attack frameworks, and emerging threats.
• Conduct threat modeling exercises to identify attack paths, security gaps, and mitigation strategies.
• Perform proactive threat hunting and security monitoring across enterprise environments.
• Collaborate with SOC, Incident Response, Threat Intelligence, and Security Engineering teams to improve detection coverage.
• Map detections to MITRE ATT&CK techniques and adversary behaviors.
• Analyze security logs from endpoints, cloud environments, applications, identity platforms, and network devices.
• Continuously tune detections to minimize false positives and improve operational efficiency.
• Support security investigations, incident response, and post-incident analysis.
• Develop metrics and reporting to measure cyber defense effectiveness.

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
• *Salary Range- $90,000-$100,000 a year

Location

Irvine, CA

Function

TECHNOLOGY

Role

Engineer

ID

436369

Skills

Cyber Security | Cyber Threat Hunting

Salary Range

$90,000 - $100,000