SOC - Detection Engineer

Your Role

We’re hiring a SOC – Detection Engineer to strengthen enterprise-scale security detection and threat hunting capabilities! If you have expertise in Microsoft Sentinel, Defender XDR, KQL, Python, Threat Hunting, and Detection Engineering, apply now for Pan India location candidates with 9-12 years of experience. Join us in building advanced, scalable, and effective security detection capabilities across modern enterprise environments.

• Design, develop, and continuously improve detection use cases, analytics rules, correlation logic, anomaly detection models, threat hunting queries, dashboards, and watchlists across Microsoft Sentinel, Defender XDR, and related security platforms.
• Translate threat intelligence, incident findings, red/purple team outcomes, emerging threats, and business risks into prioritized detection requirements aligned with organizational security objectives and MITRE ATT&CK coverage.
• Create, test, validate, tune, and maintain detection logic using KQL, Python, PowerShell, and detection-as-code methodologies while minimizing false positives and improving detection effectiveness.
• Collaborate with SOC, Data Onboarding, and Security Automation teams to ensure telemetry readiness, SOAR integration, operational validation, documentation, and successful production deployment of detections.
• Conduct threat hunting, attack emulation, behavioral analytics, and continuous detection coverage assessments while maintaining detection lifecycle governance, quality metrics, release management, and ongoing enhancements.

Your Profile

• Experience in Detection Engineering, Threat Hunting, and Security Analytics with demonstrated ownership of the end-to-end detection lifecycle, content validation, and cross-domain threat detection capabilities. 
• Strong expertise in Microsoft Sentinel, Microsoft Defender XDR, Azure Data Explorer (ADX), KQL, Python, PowerShell, and detection engineering best practices, including analytics development, tuning, testing, and operationalization of security content.
• Hands-on experience with CI/CD, Git, Infrastructure-as-Code (IaC), Detection-as-Code, testing automation, content repositories, platform integrations,   peer review processes, and detection release management within SOC environments.
• Experience working with Azure Data Explorer, Databricks, Jupyter/iPython Notebooks, MSTICPy, security data science, statistical/ML analytics, and data engineering concepts to develop and operationalize advanced hunting, anomaly detection, and behavioral analytics use cases.
• Proven experience with attack emulation and detection validation frameworks such as Atomic Red Team, Caldera, Prelude, AttackIQ, Sigma, YARA/YARA-L, as well as fraud, identity, cloud, SaaS, OT, data leakage, and network anomaly detection use cases.

What you will love working in Capgemini

• You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group.
• You will also get personalized career guidance from our leaders. You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.