If you are Interested, please fill this form:-

https://docs.google.com/forms/d/e/1FAIpQLSdrr1iAlbWgkrzfIiW4P13TGym9izzBFKZAa6QkgBbIycDi2w/viewform?usp=publish-editor

Role: Security Engineer (Detection & Response / SIEM & SOAR)

Required Technical Skill Set: SIEM Engineering (Google SecOps / Chronicle / Splunk), Detection Engineering & Detection-as-Code (YARA-L / Sigma / Python), SOAR Automation & Playbook Development, Threat Hunting (Hypothesis-Driven & Behavioral Hunting), Security Telemetry Integration (BindPlane, OpenTelemetry, Logstash, Syslog, Cloud Logs), Secure CI/CD Pipelines (GitHub Actions / GitLab CI), MITRE ATT&CK; Mapping

Desired Experience Range: 7 – 12 Years (with strong focus on SIEM/SOAR platform engineering, detection engineering, threat hunting, and incident response automation)

Role Descriptions

Must-Have (Candidates must demonstrate depth in core security engineering and a blend/combination of the following specialisms)

- SIEM & Security Analytics Engineering: Deep hands-on experience designing, scaling, and operating enterprise next-gen SIEM platforms (Google SecOps / Chronicle, Splunk, Microsoft Sentinel), including data parsing, UDM mapping, indexing, and high-performance search optimization.
- Detection Engineering & Detection-as-Code: Proven track record authoring, testing, and operationalising threat detection rules using YARA-L, Sigma, SPL, or KQL.



Practical experience applying DevOps/CI-CD principles to detection lifecycles (version control, automated validation, testing harnesses, and promotion).
- SOAR Automation & Orchestration: Advanced experience building automated incident triage, investigation, and response playbooks using modern SOAR platforms (Google SecOps SOAR / Siemplify, Splunk SOAR / Phantom, Cortex XSOAR), utilizing custom Python scripts and REST API integrations.
- Proactive Threat Hunting: Robust capability in conducting hypothesis-driven and behavioral threat hunts across multi-cloud (GCP / Azure / AWS) and on-premises estates to identify advanced persistent threats (APTs) and evasive adversaries bypassing signature-based alerts.
- Security Telemetry Ingestion & Parsing: Practical experience configuring and optimizing log collectors and telemetry pipelines (BindPlane OP, OpenTelemetry Collector, Logstash, Fluentbit, Cloud Pub/Sub, Event Hubs), ensuring schema normalization and audit data integrity.
- Threat Frameworks & Contextual Enrichment: Extensive knowledge of MITRE ATT&CK;, D3FEND, and Cyber Kill Chain frameworks to map detection coverage, evaluate visibility gaps, and enrich security signals with threat intelligence (GTI, STIX/TAXII).
- Scripting & CI/CD Tooling: High proficiency in Python for security automation, combined with hands-on experience utilizing Git, GitHub Actions, or GitLab CI for managing security infrastructure and detection repositories.

📌 Security Engineer (Kochi)
🏢 Artech
📍 Kochi