Location: Any Capgemini Location / Hybrid

Primary Skills
Microsoft Sentinel
Defender XDR
KQL
Detection Engineering
Threat Hunting

Secondary Skills
Python
PowerShell
MITRE ATT&CK;
Azure Data Explorer
Detection-as-Code
SOAR Automation

We are looking for a skilled Detection Engineer to design, develop, validate, and optimize advanced threat detections across enterprise environments. The ideal candidate will have strong expertise in Microsoft Sentinel, Defender XDR, KQL, and Threat Hunting, with hands-on experience building detection use cases, analytics rules, and security monitoring capabilities.

Key Responsibilities
Design, develop, and maintain detection use cases, analytics rules, hunting queries, dashboards, and correlation logic.
Create and tune detections in Microsoft Sentinel and Defender XDR.
Translate threat intelligence, incident findings, red/purple team outputs, and emerging threats into actionable detection content.
Perform threat hunting and identify prospects to improve detection coverage.
Map detections to the MITRE ATT&CK; framework and identify coverage gaps.
Validate and test detections using attack simulations,



threat emulation, and historical data analysis.
Reduce false positives through tuning, enrichment, suppression logic, and behavioral analysis.
Develop and maintain detection documentation, playbooks, and operational handoff procedures.
Collaborate with SOC, Data Onboarding, Automation, and Incident Response teams.
Support Detection-as-Code initiatives, CI/CD pipelines, and content lifecycle management.

Required Skills 6+ years of experience in Detection Engineering, Threat Hunting, or Security Analytics.
Solid hands-on experience with Microsoft Sentinel and Defender XDR.
Expert knowledge of KQL (Kusto Query Language).
Solid scripting skills in Python and PowerShell.
Experience with SIEM/XDR rule creation, tuning, and validation.
Deep understanding of MITRE ATT&CK; and threat-informed defense.
Experience with detection engineering, content lifecycle management, and analyst workflows.
Knowledge of Windows, Linux, Active Directory, Entra ID, Azure, Microsoft 365, cloud, network, and endpoint security.

📌 Detection Engineer Soc Bengaluru
🏢 Capgemini
📍 Bengaluru