{"id":1447630,"url":"https://alion.io/job/solstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer","title":"Senior Advanced Cybersecurity Detection & Threat Intelligence Engineer","company":{"id":1888278,"name":"Solstice Advanced Materials","domain":"solstice.com","url":"https://alion.io/company/solstice-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-08-12T14:49:31Z","employer_posted_date":"2026-08-12","last_verified_at":"2026-10-15T07:50:26Z","board_verified":true,"closed_at":null,"days_open":63,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":63},"description":"Location: Remote ( this role is approved for India-based candidates only)\nWe are seeking a Sr. Advanced Cybersecurity Engineer based in India to serve as a detection and threat intelligence engineer within our Threat Detection & Response (TDR) program. This role focuses on detection engineering, threat intelligence operationalization, and SOAR automation across IT enterprises, cloud, OT/ICS, and identity environments. The ideal candidate will design and tune detection logic, drive security telemetry coverage improvements, build automated enrichment and detection workflows, and own the full detection development lifecycle from hypothesis through production deployment.\nKey Responsibilities\nDesign, implement, and continuously tune threat detections across SIEM, EDR/XDR, OT security platforms, and cloud-native security tooling.\nOwn the end-to-end detection engineering lifecycle - hypothesis development, rule authoring, validation, deployment, tuning, and retirement - aligned to MITRE ATT&CK across IT, OT, cloud, and identity environments.\nOperationalize threat intelligence by translating finished intel, IOCs, and adversary TTPs into actionable detection rules, hunt hypotheses, and automated enrichment workflows.\nManage and maintain threat intelligence feeds and platforms, including ingestion, validation, confidence scoring, and expiration of IOC libraries.\nBuild, maintain, and improve SOAR automation playbooks, enrichment pipelines, and detection workflows to increase alert fidelity and reduce analyst toil.\nDevelop and maintain detection content for OT/ICS environments, including industrial protocol anomaly detection, Purdue model segmentation visibility, and OT-specific threat actor TTPs.\nImprove security telemetry quality and coverage by collaborating with infrastructure, network, cloud, OT, and platform engineering teams to onboard new log sources and validate data fidelity.\n Required Skills & Experience\n7-10+ years of experience in cybersecurity with a focus on detection engineering, security operations, or threat intelligence.\nStrong hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, Elastic, or QRadar - including rule authoring, query development, and data onboarding.\nDeep understanding of adversary tactics, techniques, and procedures with applied experience mapping detections to MITRE ATT&CK.\nHands-on experience developing detection rules, correlation logic, behavioral analytics, and threshold-based alerting across multiple telemetry sources.\nDemonstrated experience with SOAR platforms for building automated enrichment pipelines, detection workflows, and threat intel operationalization.\nStrong scripting and automation skills in Python, PowerShell, or KQL for detection development, data parsing, and workflow automation.\nExperience with threat intelligence platforms (TIP) for IOC lifecycle management, feed integration, and intel-to-detection operationalization.\nPreferred Qualifications\nExperience building or maturing a detection engineering program including detection backlog management, coverage gap analysis, and ATT&CK heatmap maintenance. \nExperience with OT/ICS security monitoring. \nFamiliarity with threat intelligence integration and threat hunting methodologies. \nFamiliarity with detection-as-code practices, version control for detection content, and automated rule testing pipelines. \nKnowledge of cloud-native security monitoring and identity telemetry. \nRelevant certifications such as GDAT, GCDE, GCIA, GCED, or equivalent credentials.","description_format":"text","description_chars":3531,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Threat Intelligence","Information Security","Chemical Manufacturing"],"lifecycle":[{"event":"open","at":"2026-09-29T06:55:41Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.663,"p_room":0.36,"age_days":63,"expected_fill_days":38,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/solstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer","json_url":"https://alion.io/job/solstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer.json","meta":{"generated_at":"2026-10-15T11:50:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18299,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1888278},"rest":"https://alion.io/mcp/rest/get_company?id=1888278"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsolstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsolstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsolstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/solstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsolstice-senior-advanced-cybersecurity-detection-threat-intelligence-engineer"}]}