{"id":3272816,"url":"https://alion.io/job/cred-threat-detection-engineer","title":"threat detection engineer","company":{"id":13702,"name":"CRED","domain":"cred.club","url":"https://alion.io/company/cred","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":11000,"max_usd":31000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Diamond Model","optional":false},{"name":"GitHub","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-01-29T08:51:47Z","employer_posted_date":"2026-01-29","last_verified_at":"2026-10-27T11:54:07Z","board_verified":true,"closed_at":null,"days_open":271,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":270},"description":"what is CRED?\nCRED is an exclusive community for India’s most trustworthy and CREDitworthy individuals, where the members are rewarded for good financial behavior. CRED was born out of a need to bring back the focus on a long lost virtue, one of trust, the idea being to create a community centered around this virtue. a community that constantly strives to become more virtuous in this regard till they finally scale their behavior to create a utopia where being trustworthy is the norm and not the exception. to build a community like this requires a community of its own; a community special in its own way, working towards making this vision come true\nhere’s a thought experiment: what do you get when you put a group of incredibly passionate and driven people and entrust them with the complete freedom to chase down their goals in a completely uninhibited manner? answer: you get something close to what we have at CRED; CRED just has it better\nwhat you will do ?\nwork across a diverse information security domain, with a strong focus on threat detection, response, and security telemetry across infrastructure, cloud, and data\nidentify and investigate security threats (internal and external), partner with stakeholders on remediation, and design preventive controls for recurring or systemic issues\ndesign, build, and continuously improve high-fidelity detection use cases across cloud, endpoint, identity, and network telemetry\nformulate new detection ideas based on adversary research, emerging attack techniques, industry incidents, and threat intelligence\nlead and participate in incident response, performing root-cause analysis and driving preventive improvements post-incident\ndevelop and enhance the CRED’s detection, monitoring and response capabilities\nautomate incident response workflows using playbooks and orchestration to reduce manual effort\nbuild in-house security analytics solutions using open source tools (log parsing, event correlation and threat detection)research/conduct threat hunting operations using known adversary tactics, techniques and procedures to detect advanced threats\nassist with creating security awareness and maintaining prudent security engineering culture within an organization\nenable compliance in teams and help them achieve some of the industry’s best practices (e.g. PCI DSS, ISO 27001)\nyou should apply if you have:\n2 to 6 years of experience in information security with a strong focus on threat detection and response\nhands-on experience detecting and responding to threats across cloud (aws preferred), endpoint (windows/linux/macOS), and network telemetry\nexposure to EDR, IDS/IPS, and SIEM / centralized logging platforms (splunk, ELK, sentinel, or similar), including building high-fidelity detection pipelines\nproficiency in at least one programming or scripting language (python, go, or bash)\nsolid understanding of MITRE ATT&CK, cyber kill chain, and diamond model\nability to design and tune detection rules using MITRE ATT&CK and threat intelligence with a focus on signal quality\nexperience with threat hunting, automation and enrichment, regex creation, and false-positive reduction\nexperience handling the complete incident response lifecycle, from detection through remediation and reporting\nstrong data-driven mindset with the ability to influence both technical and non-technical stakeholders\nability to act as a go-to person, communicating clearly with engineering, product, and business teams\nproactive approach to staying current with security news, breach reports, tools, and attacker research\nstrong learning agility and passion for exploring diverse security domains, demonstrated via github, blogs, research, or talks\nexposure to the AI-driven threat landscape, digital forensics, or malware analysis is a strong plus","description_format":"text","description_chars":3797,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Payment Processing & Gateways","Personal Finance Apps & Education"],"lifecycle":[{"event":"open","at":"2026-10-26T12:38:26Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.101,"p_room":0.28,"age_days":270,"expected_fill_days":37,"reasons":["conf:2","win:tail","crowd:junior"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/cred-threat-detection-engineer","json_url":"https://alion.io/job/cred-threat-detection-engineer.json","meta":{"generated_at":"2026-10-27T13:10:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1144,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13702},"rest":"https://alion.io/mcp/rest/get_company?id=13702"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcred-threat-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcred-threat-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcred-threat-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cred-threat-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcred-threat-detection-engineer"}]}