Summary : MathWorks is dedicated to fortifying our global security posture by combining robust operational defense with proactive, intelligence-driven threat detection. As a Security Analyst with a focus on Detection Engineering and Threat Operations, you will monitor and respond to security events, support regional security needs, and drive the development of advanced detection and hunting capabilities across our cloud and on-prem environments.
Role & responsibilities :
Operational Security & Incident Response
- Monitor, review, and analyze security alerts and events from SIEM, EDR, and cloud platforms to identify, triage, and respond to threats.
- Escalate, investigate, and coordinate incident response activities as needed, collaborating with global and regional teams.
- Support regional offices by addressing security requests, conducting investigations, and providing tailored security guidance.
- Maintain accurate documentation of incidents, investigations, and actions taken within incident reports.
Detection Engineering & Content Management
Design, implement, and tune detection rules, analytics, and pipelines to improve threat coverage and reduce false positives.Manage the full lifecycle of detection content : ideation, development, testing, deployment, and retirement.Map detection logic to adversary frameworks (e.g., MITRE ATT&CK) and track coverage against evolving threats.Threat Hunting & Analytics
Develop and execute hunt hypotheses based on threat intelligence, telemetry, and environmental changes.Share hunt outcomes and lessons learned to strengthen overall detection and response posture.Threat Intelligence Integration
Collect, analyze, and operationalize threat intelligence relevant to MathWorks threat landscape.Integrate CTI into detection engineering and hunting to anticipate and disrupt adversary behaviors.Maintain awareness of emerging TTPs, vulnerabilities, and global threat activity.Minimum qualifications : A bachelor's degree and 3 years of professional work experience (or a master's degree, or equivalent experience) is required.
Additional qualifications :
Required Skills :
Hands-on experience with SIEM, EDR, and cloud security tools.Proficiency in triaging and responding to security alerts and incidents in a global enterprise environment.Scripting / automation skills (Python, PowerShell, Bash) for detection, hunting, or process improvement.Understanding of MITRE ATT&CK and adversary behavior frameworks.Experience with threat intelligence platforms and integrating CTI into detection or response workflows.Strong analytical, documentation, and communication skills for cross-team collaboration.Preferred Skills :
Experience with detection-as-code, SOAR platforms, and automation of security operations.Experience supporting regional / global offices and collaborating across time zones.Commitment to continuous learning and professional development in security operations and detection engineering.Interested candidates can share their resume to keshavk@mathworks.com