Detection Engineering Analyst (L2) Lot 5 – Detection Engineering Implementation Location: Hyderabad / Bangalore Experience: 5–7 Years Role Summary The Detection Engineering Analyst (L2) will be responsible for implementing, tuning, and optimizing security detections across enterprise environments. The role will support cybersecurity transformation initiatives by developing detection use cases, improving threat visibility, reducing false positives, and enhancing the organization\'s ability to detect and respond to security threats.
Roles and Responsibilities • Design, implement, and maintain security detection use cases aligned to organizational security and risk requirements. • Develop and tune detection rules, correlation searches, alerts, and threat-hunting queries across SIEM and security monitoring platforms. • Collaborate with SOC, Threat Intelligence, Incident Response, and Security Engineering teams to improve detection coverage and effectiveness. • Analyze security events, attack techniques, and threat patterns to identify gaps in existing monitoring capabilities. • Conduct regular reviews of alerts and detection content to reduce false positives and improve operational efficiency. • Support onboarding of new log sources, security tools, cloud services, and business applications into the detection ecosystem. • Map detections to industry frameworks such as MITRE ATT&CK;, NIST, and Cyber Kill Chain methodologies. • Participate in security assessments, purple team exercises, and threat simulations to validate detection capabilities. • Develop documentation, operational procedures, detection standards, and knowledge articles. • Produce dashboards and reporting on detection effectiveness, coverage, alert quality, and security monitoring maturity. • Support continuous improvement initiatives focused on threat detection, automation, and security operations transformation.
Mandatory Skills • Detection Engineering • SIEM Platforms (Microsoft Sentinel, Splunk, QRadar, Chronicle, etc.) • Security Monitoring & Alert Tuning • Threat Detection & Use Case Development • MITRE ATT&CK; Framework • KQL, SPL, SQL, or Similar Query Languages • Security Incident Analysis • Log Management & Event Correlation • Cybersecurity Operations • Security Reporting & Analytics Preferred Skills • Microsoft Sentinel • Defender XDR • Splunk Enterprise Security • SIEM Automation & SOAR • Python or PowerShell Scripting • Threat Hunting • Cloud Security Monitoring (Azure/AWS)
Source: HCLTech careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.
