{"id":3433621,"url":"https://alion.io/job/staples-india-lead-cyber-security-engineer-siem-detection-engineering","title":"Lead Cyber Security Engineer – SIEM & Detection Engineering","company":{"id":4441822,"name":"Staples India Business Innovation Hub","domain":"staplesindia.in","url":"https://alion.io/company/staples-india","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"B","score":78,"open_postings":37,"ghost_share":0,"stale_share":0.865,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":50000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-11-05T23:58:55Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"The Lead Cyber Security Engineer - SIEM & Detection Engineering is the primary technical owner for enterprise security monitoring, detection logic, and telemetry pipelines. This role architects and optimizes the SIEM platform, designs detection use cases across endpoint, network, identity, cloud, and application layers, and ensures reliable, cost-efficient log ingestion and normalization. A core responsibility is engineering and operating Cribl Stream and Cribl Edge to route, filter, enrich, and transform security telemetry at scale-improving SIEM visibility, data quality, performance, and cost management. The Lead Engineer partners with SOC/IR, Threat Hunting, Identity, Cloud, Network, and Application teams to raise detection fidelity, reduce false positives, and accelerate investigations. The role drives the detection engineering roadmap, mentors junior staff, and maintains a robust observability ecosystem aligned to threat intelligence and MITRE ATT&CK. Duties &Responsibilities\nArchitect and optimize SIEM platforms (e.g., Microsoft Sentinel, Splunk), including ingestion pipelines, parsing/normalization, enrichment, and correlation logic.\nEngineer and operate Cribl Stream and Cribl Edge for log routing, filtering, transformation, enrichment, data reduction, and destination fan-out (SIEM, data lake, cold storage).\nDesign and maintain telemetry onboarding with schema mapping, collectors/agents, connectors, API integrations, replay, and edge collection for diverse sources (endpoint, network, cloud, identity, app).\nDevelop advanced detections and analytics (rules, queries, correlations) aligned to MITRE ATT&CK, emerging TTPs, and threat intelligence; measure detection efficacy and coverage.\nLead systematic alert tuning to reduce false positives and improve signal-to-noise, leveraging Cribl pipelines and SIEM analytics to standardize high-fidelity events.\nBuild investigation assets (dashboards, hunting queries, data models) that accelerate SOC workflows and root-cause analysis across telemetry domains.\nMonitor ingestion health and cost (EPS/GB/day, license utilization), implement Cribl-based data controls (sampling, routing, suppression) to ensure reliability and budget adherence.\nPerform RCA on detection gaps and pipeline failures; implement durable fixes in Cribl routes/pipelines and SIEM parsing/enrichment layers.\nMentor engineers and analysts on KQL/SPL, detection engineering patterns, Cribl pipeline design, and telemetry best practices; conduct peer reviews and standards governance.\nMaintain documentation: data dictionaries, detection catalogs, Cribl pipeline/runbooks, ingestion maps, and metrics reporting on coverage, fidelity, MTTR, and pipeline SLOs.\nRequirements Basic\nQualifications\nSolid understanding of network protocols, data protection mechanisms, and threat landscapes\nHands-on experience with security systems, including firewalls, intrusion detection systems, anti-virus software, etc.\nPreferred\nQualifications\nIndustry-recognized certifications (e.g., CISSP, CISM, CEH)\n• Master’s degree in Cybersecurity or a related field","description_format":"text","description_chars":3087,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-29T01:51:46Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.58,"p_room":0.75,"age_days":23,"expected_fill_days":29,"reasons":["conf:2","stale_co","velocity","win:late"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/staples-india-lead-cyber-security-engineer-siem-detection-engineering","json_url":"https://alion.io/job/staples-india-lead-cyber-security-engineer-siem-detection-engineering.json","meta":{"generated_at":"2026-11-06T02:04:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3311,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4441822},"rest":"https://alion.io/mcp/rest/get_company?id=4441822"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstaples-india-lead-cyber-security-engineer-siem-detection-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstaples-india-lead-cyber-security-engineer-siem-detection-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstaples-india-lead-cyber-security-engineer-siem-detection-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/staples-india-lead-cyber-security-engineer-siem-detection-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstaples-india-lead-cyber-security-engineer-siem-detection-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3433621}},{"tool":"search_jobs","arguments":{"company":"staplesindia.in","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3433621},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}