Role :Threat Detection Engineer Description

Exp 3 to 5 Yrs

JD :-

Develop and tune detection rules using SIEM/XDR platforms (e.g., Sentinel, Splunk, CrowdStrike, etc.) to detect TTPs across the MITRE ATT&CK framework.

2. Collaborate with threat hunters to create proactive detection hypotheses and convert them into persistent use cases.

3. Design and build scalable, high-fidelity use cases mapped to threat models, compliance needs, and business priorities.

4. Analyze telemetry data (e.g., logs, endpoint activity, network flows) to identify behavior patterns or anomalies.

5. Reduce false positives, increase detection fidelity, and ensure performance of detection rules in production.

6. Enrich detections using internal and external threat intel feeds (e.g., IOCs, TTPs).