Location : Bengaluru
Experience : 4+ years
About the Role
We are looking for an experienced Detection Engineer to join our MDR (Managed Detection & Response) team. In this role, you will design, develop, and optimize high-fidelity security detections across network, endpoint, and cloud environments. You’ll bring deep expertise in networking, protocols, and threat detection to help solve complex security challenges and improve threat visibility for our customers.
Key Responsibilities
- Design, develop, tune, and optimize detections with a strong focus on :
- NDR / IDS / IPS detections and signatures
- Anomaly-based and behavioural-based detections
- Research emerging network-based threat vectors and translate them into effective security detections
- Perform deep analysis of network traffic and protocols including TCP / IP, DNS, , and related protocol analysers
- Write, review, and optimize Suricata / Snort rules
- Leverage MITRE ATT&CK , PCAP analysis , and threat intelligence feeds to enhance detection coverage
- Collaborate closely with MDR analysts and engineering teams to solve complex detection and security challenges
- Contribute to continuous improvement of detection quality, coverage, and performance
Required Skills & Experience
4+ years of hands-on detection authoring experience , primarily in network securityStrong understanding of networking fundamentals and protocols (TCP / IP, DNS, etc.)In-depth knowledge of :IDS / IPS / NDR technologiesProtocol analysis and network threat detectionNetwork-related security domains such as LDAP, NTLM , and similar protocolsProven ability to research threats and develop detections for network-based attack techniquesExperience using MITRE ATT&CK , PCAPs , and threat intelligence feedsWorking knowledge of third-party firewalls, IDS / IPS, and network edge devices (PAN, Cisco, Fortinet, etc.) including their capabilities and common vulnerabilities.Development & Engineering Experience
Experience in at least two of the following languages or practices :
Programming languages : Python, Go, Java, or C / C++Test-Driven Development (TDD)Strong understanding of DevOps tools and methodologiesSecure development best practicesCloud development experience in AWS, Azure, or GCP , including :Kubernetes / ContainersIaaS and key PaaS servicesAgile methodologies ( Scrum / Kanban )