About the role
As an Analyst, you will operate as both an alert responder and a hands on detection engineer.
This role goes beyond traditional monitoring - you will investigate and triage threats and actively
improve detection capabilities by closing gaps, tuning noisy rules and deprecating
ineffective detections. You will ensure we has high-quality, high-fidelity detection coverage
across the infrastructure.
Key Responsibilities
• Lead end to end investigation and triage of alerts with clear, high quality documentation
across both on-premises infrastructure and cloud environments ensuring equal depth
and rigor in each area.
• Collaborate with cross functional teams and operate as a frontline defender in a 24×7
setting.
• Identify detection gaps and implement improvements through new or updated
detection rules.
• Reduce false positives by tuning low value alerts and deprecating obsolete detections.
• Develop, review, and validate detection logic against MITRE ATT&CK aligned TTPs.
• Contribute to new use case development based on attacker behavior and maintain
assisted playbooks and SOPs.
• Identify opportunities and implement automation and AI workflows within Detection
Engineering pipelines to optimize operations.
Ideal Candidate Profile
Experience
• 5+ years in security operations in medium/large enterprises.
• Demonstrated experience in both alert triage and detection engineering/content tuning.
• Experience working across global time zones.
Technical Expertise
• Strong SIEM rule-writing skills.
• Hands-on with EDR, NDR, firewall logs.
• Demonstrated expertise in analyzing cloud logs, detecting IAM anomalies, and
interpreting SaaS security alerts to identify and respond to advanced threats.
• Proven ability to assess and defend against threat vectors targeting both on-premises
infrastructure and modern cloud workloads, including containerized and serverless
environments.
• Solid understanding of MITRE ATT&CK; ability to map alerts to TTPs.
• Scripting (PowerShell, Bash, Python) for enrichment/automation.
Soft Skills
• High-quality technical writing and documentation.
• Ability to operate with minimal direction and take end to end ownership.
• Comfortable handling ambiguity and making analytical decisions.Comments for Suppliers: