Job Summary

Detection Engineering Analyst (L2) Lot 5 – Detection Engineering Implementation Location: Hyderabad / Bangalore Experience: 5–7 Years Role Summary The Detection Engineering Analyst (L2) will be responsible for implementing, tuning, and optimizing security detections across enterprise environments. The role will support cybersecurity transformation initiatives by developing detection use cases, improving threat visibility, reducing false positives, and enhancing the organization's ability to detect and respond to security threats.

Key Responsibilities

Roles and Responsibilities • Design, implement, and maintain security detection use cases aligned to organizational security and risk requirements. • Develop and tune detection rules, correlation searches, alerts, and threat-hunting queries across SIEM and security monitoring platforms. • Collaborate with SOC, Threat Intelligence, Incident Response, and Security Engineering teams to improve detection coverage and effectiveness. • Analyze security events, attack techniques, and threat patterns to identify gaps in existing monitoring capabilities. • Conduct regular reviews of alerts and detection content to reduce false positives and improve operational efficiency. • Support onboarding of new log sources, security tools, cloud services, and business applications into the detection ecosystem. • Map detections to industry frameworks such as MITRE ATT&CK;, NIST, and Cyber Kill Chain methodologies. • Participate in security assessments, purple team exercises, and threat simulations to validate detection capabilities. • Develop documentation, operational procedures,



detection standards, and knowledge articles. • Produce dashboards and reporting on detection effectiveness, coverage, alert quality, and security monitoring maturity. • Support continuous improvement initiatives focused on threat detection, automation, and security operations transformation.

Skill Requirements

Mandatory Skills • Detection Engineering • SIEM Platforms (Microsoft Sentinel, Splunk, QRadar, Chronicle, etc.) • Security Monitoring & Alert Tuning • Threat Detection & Use Case Development • MITRE ATT&CK; Framework • KQL, SPL, SQL, or Similar Query Languages • Security Incident Analysis • Log Management & Event Correlation • Cybersecurity Operations • Security Reporting & Analytics Preferred Skills • Microsoft Sentinel • Defender XDR • Splunk Enterprise Security • SIEM Automation & SOAR • Python or PowerShell Scripting • Threat Hunting • Cloud Security Monitoring (Azure/AWS)

Must Have Skill

Security Event Analysis,Technical solution implementation-SIEM

Positive to Have Skill

Other Requirements

Certifications Mandatory • Security+ or equivalent security certification Preferred • SC-200 Microsoft Security Operations Analyst • Splunk Core Certified User/Power User • GIAC Certified Incident Handler (GCIH) • ITIL v4 Foundation • Microsoft Sentinel Certifications Soft Skills • Strong analytical and investigative mindset • Excellent problem-solving capabilities • Strong communication and documentation skills • Ability to work across security and infrastructure teams • Continuous learning and security-focused mindset

📌 Sr Administrator (Support & Operations) (India)
🏢 HCLTech
📍 India