{"id":2705823,"url":"https://alion.io/job/atyeti-senior-detection-engineer","title":"Senior Detection Engineer","company":{"id":3800820,"name":"ATYETI","domain":"atyeti.com","url":"https://alion.io/company/atyeti","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-16T12:09:28Z","employer_posted_date":null,"last_verified_at":"2026-10-16T12:09:28Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Job Description :\n\nJob Responsibilities :\n\nDetection Engineering (Primary Focus) :\n\n- Design, develop, and maintain high-fidelity detection rules and analytics across CrowdStrike Falcon (NGSIEM/EDR) and integrated SIEM platforms.\n\n- Translate threat intelligence and adversary behaviors (MITRE ATT&CK) into scalable detection use cases.\n\n- Continuously tune and optimize detections to improve alert fidelity and signal-to-noise ratio.\n\n- Develop and maintain detection-as-code practices, including version control, testing, and documentation.\n\n- Perform coverage gap analysis and proactively build new detections to address emerging threats.\n\n- Partner with threat hunting teams to convert hypotheses into production-grade detections.\n\n- Validate detection coverage through purple teaming, adversary simulation, and attack replay testing.\n\n- Build detection strategies across :\n\ni. Endpoint (EDR)\n\nii. Identity\n\niii. Network and OT telemetry\n\niv. Cloud environments\n\nSOAR Engineering & Automation (Secondary Focus) :\n\n- Design and implement automated playbooks using CrowdStrike Falcon Fusion and/or SOAR platforms.\n\n- Automate end-to-end incident response workflows, including :\n\ni. Alert triage and enrichment\n\nii. Threat intelligence correlation\n\niii. Endpoint containment and remediation\n\niv. Case management and escalation\n\n- Integrate SOAR with SIEM, EDR (CrowdStrike), NDR, vulnerability management, and threat intelligence platforms.\n\n- Develop and maintain API-based integrations and connectors across security tools.\n\n- Ensure automation workflows are resilient, auditable, and governed.\n\n- Continuously identify opportunities to reduce manual SOC effort through orchestration.\n\nOperational Mentality and SOC Optimization :\n\n- Champion a detection-first SOC model supported by automation.\n\n- Improve SOC workflows through automated enrichment, triage, and response actions.\n\n- Collaborate with SOC analysts, threat hunters, and engineers across APAC.\n\n- Enhance operational metrics such as :\n\ni. Mean Time to Detect (MTTD)\n\nii. Mean Time to Respond (MTTR)\n\niii. Alert fidelity and reduction of false positives\n\nOT & R&D Security Strategy :\n\n- Develop detection and response use cases tailored for OT/ICS, SCADA, and IIoT environments.\n\n- Collaborate with engineering and R&D teams to integrate detect-and-respond capabilities into product lifecycles.\n\n- Align detection strategies with :\n\ni. MITRE ATT&CK (Enterprise & ICS)\n\nii. NIST CSF / NIST 800-82\n\niii. IEC 62443\n\n- Ensure safe implementation of automation within sensitive OT environments.\n\nJob Qualifications :\n\nRequired Qualifications & Experience :\n\n- 7+ years of experience in cybersecurity with a focus on detection engineering, SOC operations, or incident response.\n\n- 3+ years of hands-on experience in :\n\ni. Detection engineering / SIEM content development\n\nii. SOAR platforms (CrowdStrike Falcon Fusion preferred)\n\niii. Strong experience with CrowdStrike Falcon (EDR + NGSIEM)\n\n- Proven experience building detection rules, behavioral analytics, and correlation logic.\n\n- Proficiency in scripting and automation (Python, PowerShell, or similar).\n\n- Experience with detection-as-code and API integrations.\n\n- Strong understanding of :\n\ni. MITRE ATT&CK (Enterprise & ICS)\n\nii. Threat detection methodologies\n\niii. Incident response lifecycle\n\n- Hands-on experience with SIEM, EDR, NDR, and threat intelligence platforms.\n\n- Foundational knowledge of IT and OT security (ICS/SCADA environments).\n\n- Experience securing R&D environments and intellectual property.\n\n- Working knowledge of cloud security (AWS, Azure, GCP).\n\nDesired Certifications :\n\n- GIAC Certified Incident Handler (GCIH)\n\n- GIAC Security Operations Certified (GSOC)\n\n- GIAC Security Essentials (GSEC)\n\n- Certified Cloud Security Professional (CCSP)\n\n- Certified Information Systems Security Professional (CISSP)\n\n- CompTIA Security+\n\n- CompTIA CySA+\n\n- AWS Certified Security Specialty\n\n- Microsoft SC-200\nSkills\nThreat Detection, Crowdstrike, Security, Endpoint Detection & Response, SIEM, SOAR, Vulnerability Management, Security Operations Center, Threat Hunting, OT Security, CompTIA Security","description_format":"text","description_chars":4136,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","IT Consulting & Digital Transformation","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-16T12:29:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":27,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/atyeti-senior-detection-engineer","json_url":"https://alion.io/job/atyeti-senior-detection-engineer.json","meta":{"generated_at":"2026-10-21T09:55:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14031,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3800820},"rest":"https://alion.io/mcp/rest/get_company?id=3800820"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatyeti-senior-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatyeti-senior-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatyeti-senior-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/atyeti-senior-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatyeti-senior-detection-engineer"}]}