- India
- Senior
- 4+ years
Own and develop detection rules across EDR, XDR, cloud, and network data sources to protect global enterprises.
Responsibilities
- Craft, own, and package detection rules for EDR, XDR, cloud, and network data sources.
- Build rules that correlate detections across third-party sources and over time.
- Turn hunt findings and threat research into detections, or document why a behavior cannot be detected reliably.
- Validate every rule against real or lab telemetry before it ships, measuring noise and confirming true positives.
- Analyze false positives rigorously, and tune new and existing rules to improve detection accuracy.
Requirements
- Nice to have: SOC experience
- Nice to have: static detections
- Nice to have: cloud identity SaaS logs
- Nice to have: threat hunting
- Nice to have: test automation