16 Aug
|
HCLTech
|
Bengaluru
SOC Detection and Automation Engineer
Overview
sible for enhancing our security posture by developing, implementing, and maintaining detection content within the SIEM. A key focus of this position will be leveraging our SIEMs automation and AI capabilities to streamline level 1 security incident triage and response, thereby increasing the efficiency and effectiveness of our Security Operations Center (SOC).
ResponsibilitiesWe are seeking a highly skilled and motivated SOC Engineer to join our security operations team. This critical role will be respon
Detection Engineering and Content Development
- Design, develop, test, and deploy high-fidelity detection rules, correlational logic, and behavioral models within SIEM.
- Translate threat intelligence, known vulnerabilities, and observed attack techniques (e.g., MITRE ATT&CK; framework) into actionable detection content.
- Continuously review and tune existing detection content to minimize false positives while maximizing coverage of emerging threats.
- Ensure all detection content is mapped to relevant security controls and incident response playbooks.
Automation and Efficiency
- Develop, implement, and maintain automation playbooks (using our SIEMs automation engine) to automate repetitive Level 1 incident triage tasks, data enrichment, and initial response actions.
- Integrate SIEM with other security tools and enterprise platforms via APIs and connectors to facilitate seamless data flow and automated response.
- Explore and apply SIEMs built-in AI/ML capabilities to improve alert prioritization, anomaly detection, and automated incident clustering.
- Document automation logic, workflows, and effectiveness metrics.
Platform Management and Optimization
- Act as a subject matter expert for the SIEM, including data ingestion, logging policies, and platform health.
- Collaborate with Security Architecture and IT teams to onboard current data sources into SIEM, ensuring proper normalization and parsing for detection use
📌 Soc Engineer (Bengaluru)
🏢 HCLTech
📍 Bengaluru