Experience : 6+ years in security detection authoring / network threat detection Location : Bangalore (Hybrid / Onsite as applicable)
Required Skills & Experience
6+ years of experience in security detection authoring , with strong expertise in :
Network-based detections such as NDR, IDS, and IPS signatures
Design and development of anomaly-based and behavioral detections
Tuning and optimization of detections to improve accuracy and reduce false positives
Deep understanding of networking fundamentals and protocols , including :
TCP / IP, DNS, , and related protocols
Network authentication and directory protocols such as LDAP, NTLM , etc.
Hands-on experience with protocol analyzers and packet inspection
Strong experience with Suricata / Snort rule authoring and network threat detection frameworks
Proven ability to research network threat vectors and develop high-quality security detections
Experience using :
MITRE ATT&CK framework
PCAP analysis
Threat intelligence feeds
Exposure to third-party firewalls, IDS / IPS, and network edge devices , including understanding their capabilities, configurations, and vulnerabilities (nice to have)
Experience working in Managed Detection & Response (MDR) environments and learning multiple security technologies
Strong analytical and problem-solving skills, with the ability to help the team solve complex technical and security challenges
Solid understanding of networking, protocols, and cybersecurity fundamentals
Lead Security Engineer • Bengaluru, Karnataka, India