SOC Content Detection Engineer

2 weeks ago

Ajmer, India Sanganan IT Solutions Pvt Ltd. Full time

Department: Managed Services & Support & Security Operations Center (SOC) Job Type: Full-Time Reports To: SOC Team Lead / Head of Cybersecurity Services Full-time - WORK FROM NOIDA OFFICE, PLEASE DON'T APPLY IF YOU ARE LOOKING FOR HYBRID OR WORK FROM HOME - Short notice period or immediate joiners are preferred. Job Overview: We are seeking a technically skilled and detail-oriented SOC Content Detection Engineer to lead the development, optimization, and governance of detection content across Microsoft Sentinel and Defender XDR platforms. This role is critical to ensuring high-fidelity alerting, minimizing false positives, and aligning detection logic with threat intelligence and MITRE ATT&CK frameworks. The ideal candidate will have deep experience in KQL, Sigma rule development, and SOC telemetry analysis within MSSP environments. Key Responsibilities: 1. Detection Content Development · Design and implement custom detection rules using KQL, Sigma, and behavioral analytics. · Map detection logic to MITRE ATT&CK techniques and threat actor profiles. · Develop UEBA baselines and anomaly detection use cases. 2. Alert Tuning & Optimization · Analyze alert performance and lead biweekly tuning cycles to reduce false positives. · Collaborate with L2/L3 analysts to refine detection thresholds and suppression logic. · Maintain a detection content repository with version control and change logs. 3. Telemetry & Visibility Engineering · Conduct log source visibility reviews and telemetry gap analysis. · Recommend log onboarding priorities based on threat coverage and customer environments. · Validate parsing, normalization, and enrichment of ingested data. 4. Threat Intelligence Integration · Operationalize threat intelligence into detection content and hunt scenarios. · Integrate IOCs, TTPs, and threat actor indicators into rule logic and enrichment workflows. 5. Governance & Documentation · Maintain detection playbooks, rule documentation, and tuning reports. · Ensure detection content aligns with MSSP governance frameworks and audit requirements. · Support change control processes for rule deployment and rollback. 6. Collaboration & Enablement · Work closely with SOC analysts, onboarding consultants, and automation engineers. · Provide training and guidance on detection logic, rule writing, and tuning best practices. · Participate in incident post-mortems to identify detection gaps and improvement areas. Required Skills & Qualifications: 1. Education · Bachelor’s degree in Cybersecurity, Computer Science, or related field. 2. Certifications · Required: Microsoft Certified: Security Operations Analyst Associate · Preferred: MITRE ATT&CK Defender (MAD), GIAC (GCIA, GMON), CompTIA CySA+ 3. Technical Skills · Expert-level proficiency in KQL, Microsoft Sentinel, and Defender XDR. · Experience with Sigma rule development, UEBA, and SIEM tuning. · Strong understanding of log source telemetry, data normalization, and alert lifecycle. · Familiarity with threat intelligence platforms and MITRE ATT&CK mapping. 4. Soft Skills · Analytical mindset with strong attention to detail. · Excellent documentation and presentation skills. · Ability to collaborate across technical and operational teams. · Fluent English communication skills (spoken and written). Experience: - 5+ years in SOC or cybersecurity operations, with at least 2 years in detection engineering or SIEM content development. - Prior experience in MSSP environments or multi-tenant SOC platforms is highly preferred.

  • SoC Program Manager

    2 weeks ago

    Ajmer, India SEMIFIVE Full time

    SoC Program Manager About Semifive Founded in Seoul in 2019, SEMIFIVE is basing its foundation on Korea’s semiconductor design competency that was amassed for more than 20 years. With expertise in front-end to back-end design, SEMIFIVE has become the fastest growing silicon design company that offers the most comprehensive design solutions. SEMIFIVE’s...

  • SoC Architect – Secure Computing

    1 week ago

    Ajmer, India Mulya Technologies Full time

    SoC Architect – Secure ComputingLocations: Bangalore / Remote ( any where in India )Job Description:We are seeking an experienced SoC Architect with a strong background in securecomputing to help architect the next-generation AI inference SoC. You will focus on thedefinition and development of a secure I/O and compute subsystem, ensuring robustnessfrom...

  • High-Speed SOC Design Verification Specialist

    1 week ago

    ajmer, India beBeeVerification Full time

    Job SummaryThe position of Senior Design Verification Engineer is responsible for leading the verification efforts of complex projects and ensuring the successful execution of verification plans. This includes developing comprehensive verification strategies, test plans, and test benches for high-speed SOCs.Key ResponsibilitiesDevelop and implement...

  • Advanced Cybersecurity Expert

    2 weeks ago

    ajmer, India beBeeSecurity Full time

    Cyber Security Specialist with Advanced Threat DetectionThis position oversees the creation and implementation of intelligent security solutions utilizing SIEM, SOAR, and machine learning to enhance detection, response, and operational efficiency across the organization.The key responsibilities include:Designing, implementing, and managing enterprise SIEM...

  • Chief Content Architect

    2 weeks ago

    ajmer, India beBeeContent Full time

    Job Description:As a skilled writer, you will be responsible for crafting high-quality content that resonates with US audiences. Your primary goal is to create engaging and informative pieces that meet the needs of our clients.The ideal candidate should have a strong command of US English and be able to simplify complex topics while maintaining clarity and...

  • Lead Security Specialist

    1 week ago

    ajmer, India beBeeSecurity Full time

    Job OverviewWe are seeking a seasoned professional to fill the role of Lead Security Engineer. This individual will be responsible for designing and implementing comprehensive security policies, automating controls, and hardening infrastructure end-to-end.ResponsibilitiesEnterprise Security Governance: Ensure adherence to ISO 27001, SOC 2, GDPR, and CIS...

  • Xsoar(cortex)

    2 weeks ago

    Ajmer, India Diverse Lynx Full time

    Band-B3 C1 7 Years 11 Years Location- Hyderabad Pune Bangalore Skill- XSOAR Cortex JD- We are seeking a skilled Cortex XSOAR Engineer to support the development deployment and optimization of our Security Orchestration Automation and Response SOAR platform The ideal candidate will be responsible for creating playbooks integrating third-party tools and...

  • AI Content Evaluator

    3 days ago

    Ajmer, India Innodata Inc. Full time

    Work Mode: RemoteEngagement: Freelance / Flexible HoursOverviewWe are seeking skilled AI Content Evaluators with proficiency in one or more Indian languages to assess, review, and compare AI-generated responses. This role involves identifying toxic or harmful content, understanding linguistic nuances, and ensuring high-quality model performance across...

  • VLSI- DFT- ATPG Lead

    2 weeks ago

    Ajmer, India HCLTech Full time

    Company: HCL Tech Job Summary: We are seeking a highly motivated and experienced DFT Engineer to join our team and play a crucial role in ensuring the testability and manufacturability of our complex ASICs and SoCs. This position requires a strong understanding of DFT methodologies and the ability to independently implement and optimize DFT strategies. You...

  • VLSI- DFT- ATPG Lead

    1 week ago

    Ajmer, India HCLTech Full time

    Company: HCL Tech Job Summary: We are seeking a highly motivated and experienced DFT Engineer to join our team and play a crucial role in ensuring the testability and manufacturability of our complex ASICs and SoCs. This position requires a strong understanding of DFT methodologies and the ability to independently implement and optimize DFT strategies. You...