SOC Content Detection Engineer

WORK FROM NOIDA OFFICE, PLEASE DON'T APPLY IF YOU ARE LOOKING FOR HYBRID OR WORK FROM HOME

Department : Managed Services & Support & Security Operations Center (SOC)

Job Type : Full-Time

Reports To : SOC Team Lead / Head of Cybersecurity Services

Job Overview :

We are seeking a technically skilled and detail-oriented SOC Content Detection Engineer to lead the development, optimization, and governance of detection content across Microsoft Sentinel and Defender XDR platforms. This role is critical to ensuring high-fidelity alerting, minimizing false positives, and aligning detection logic with threat intelligence and MITRE ATT&CK frameworks. The ideal candidate will have deep experience in KQL, Sigma rule development, and SOC telemetry analysis within MSSP environments.

Key Responsibilities :

1.        Detection Content Development

• Design and implement custom detection rules using KQL , Sigma , and behavioral analytics.
• Map detection logic to MITRE ATT&CK techniques and threat actor profiles.
• Develop UEBA baselines and anomaly detection use cases.

2.        Alert Tuning & Optimization

3.       Telemetry & Visibility Engineering

4.       Threat Intelligence Integration

5.       Governance & Documentation

6.       Collaboration & Enablement

Required Skills & Qualifications :

1.       Education

2.       Certifications

3.       Technical Skills

4.       Soft Skills

Experience :

Skills Required

Sigma