Security Operations Engineer

1 day ago

Bengaluru, IndiaMid Level / Senior

H1B Sponsor

Responsibilities

Design, implement, and maintain detections and alerts in Splunk and related platforms.
Build detections across multiple data domains including identity and cloud infrastructure.
Correlate signals from diverse sources to identify security risks.
Collaborate with business units to map processes to security use cases.
Support incident triage, investigation, and post-incident activities.
Develop automation workflows using Python and APIs.
Tune alerts to improve detection quality and reduce false positives.
Collaborate on logging strategy and platform customization.
Apply threat intelligence to enhance detection capabilities.
Create operational guidance and documentation for security responders.
Continuously improve detection content and response workflows.

6+ years of experience in cybersecurity or a related field.
3+ years of hands-on experience in incident response or detection engineering.
Strong experience with a SIEM platform, preferably Splunk.
Solid understanding of the incident response lifecycle.
Strong foundational knowledge of networking, systems, and security principles.
Ability to write scripts and automate tasks using Python.
Experience working with APIs and integrating data sources.
Strong analytical skills to translate threats into detection logic.
Excellent communication skills for collaboration across teams.
Bachelor’s degree in Computer Science, Information Security, or a related field.