{"id":3196357,"url":"https://alion.io/job/analog-devices-cyber-detection-engineer","title":"Cyber Detection Engineer","company":{"id":58431,"name":"Analog Devices","domain":"analog.com","url":"https://alion.io/company/analog-devices","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":59,"ghost_share":0,"stale_share":0.746,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"DNS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-24T02:30:54Z","employer_posted_date":null,"last_verified_at":"2026-10-24T02:30:54Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"About Analog Devices\nAnalog Devices, Inc. (NASDAQ: ) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at and on and .\n\nDetection Engineer - Early Career\nRole OverviewThe Detection Engineer supports the development, testing, tuning, and maintenance of cyber detection capabilities across the Security Operations Centre (SOC). Working closely with SOC analysts, threat intelligence, incident response, and engineering teams, this role helps improve visibility, detection accuracy, and response effectiveness. This is an early-career position designed for individuals looking to build expertise in detection engineering, SIEM content development, threat analytics, and automation. The successful candidate will demonstrate curiosity, analytical reasoning, and the ability to independently investigate why a detection fired, how an attack could occur, and how future detections can be improved.\n\nKey ResponsibilitiesSupport the development, testing, and maintenance of SIEM detection rules, analytics, alerts, and correlation logic.\nAssist with tuning existing detections to reduce false positives and improve detection quality.\nInvestigate missed detections and support root-cause analysis activities.\nWork with SOC analysts to understand alert triage outcomes and improve detection content.\nHelp onboard new log sources into monitoring platforms and validate data quality and coverage.\nSupport detection use-case development using threat intelligence, MITRE ATT&CK, incident findings, and known attack techniques.\nParticipate in threat hunting exercises and assist with developing new detection opportunities.\nAssist with maintaining detection engineering documentation, standards, playbooks, and testing records.\nSupport development of automation workflows within SIEM, SOAR, and response platforms.\nAssist the SOC in the triage, investigation, and response of security alerts, incidents, and escalations\nContribute to purple-team, tabletop, and validation exercises to measure effectiveness of detections.\nTrack detection performance metrics, including false positives, false negatives, detection coverage, and alert quality.\nSupport continuous improvement activities following incidents, audits, and lessons learned reviews.\nMaintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after-hours escalations across multiple time zones as needed.\n\nRequired QualificationsBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or equivalent experience.\n1-3 years experience in cybersecurity, IT operations, SOC operations, system administration, or related technical field.\nUnderstanding of cybersecurity fundamentals including phishing, malware, identity attacks, network attacks, and incident response.\nKnowledge of AI-assisted detection engineering, large language models (LLMs), agentic workflows, and security automation platforms used to improve analyst productivity and detection outcomes.\nBasic knowledge of SIEM platforms and log analysis concepts.\nUnderstanding of networking fundamentals including TCP/IP, DNS, HTTP, authentication, and firewalls.\nStrong analytical and problem-solving skills.\nAbility to learn quickly and work effectively within a collaborative team environment.\nStrong written and verbal communication skills.\n\nPreferred QualificationsExperience with SIEM/SOAR platforms, Microsoft Defender, Azure, AWS, or similar platforms.\nExperience developing, integrating, or operationalizing AI-powered analysis, automation, and agent-based workflows within security operations, incident response, or detection engineering functions.\nKnowledge of MITRE ATT&CK framework.\nBasic scripting experience using Python, PowerShell, KQL, or SQL.\nSecurity+, SC-200, AZ-500, CySA+, or equivalent certifications.\nExperience participating in labs, CTFs, internships, threat hunting, or cyber research projects.\n\nSuccess MeasuresImprovement in detection quality and reduction in false positives.\nSuccessful onboarding and validation of data sources.\nDelivery of new and enhanced detection use cases.\nContribution to incident-driven detection improvements.\nAccurate documentation and testing of detection logic.\n\nJob Req Type: Experienced\nRequired Travel: Yes, 10% of the time\nShift Type: 1st Shift/Days","description_format":"text","description_chars":4809,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Sensors & Transducers","Incident Response","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-10-24T05:13:40Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":49,"reasons":["seen:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/analog-devices-cyber-detection-engineer","json_url":"https://alion.io/job/analog-devices-cyber-detection-engineer.json","meta":{"generated_at":"2026-10-26T21:06:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28396,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58431},"rest":"https://alion.io/mcp/rest/get_company?id=58431"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanalog-devices-cyber-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanalog-devices-cyber-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanalog-devices-cyber-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/analog-devices-cyber-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanalog-devices-cyber-detection-engineer"}]}