4 days ago
Chennai, IndiaMid Level
Responsibilities
- Develop, test, maintain, and improve detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms.
- Automate detection rule deployment, quality assurance, and version control using scripting and CI/CD pipelines.
- Conduct root-cause analysis of missed detections, delayed responses, high-severity incidents, and detection inefficiencies.
- Drive corrective actions and maintain a continuous security improvement backlog covering detection gaps, telemetry blind spots, and false positives.
- Analyze detection performance metrics and align priorities with business risk and the SOC transformation roadmap.
- Collaborate with SOC, incident response, threat hunting, threat intelligence, and engineering teams to operationalize detection improvements.
- Contribute to purple team exercises by validating detection logic against simulated attack paths.
Requirements
- Strong knowledge of SIEM, SOAR, EDR, and cloud security platforms.
- Proficiency in Python and PowerShell scripting and automation.
- Familiarity with detection-as-code principles and CI/CD pipelines.
- Understanding of the MITRE ATT&CK framework and threat-informed defense.
- Ability to collaborate with SOC analysts, threat hunters, and engineers and document detection logic and root-cause analysis outcomes.
- Strong analytical, problem-solving, communication, and teamwork skills.
- Preferred: GIAC GCTI, GCFA, or equivalent advanced security certification.
Benefits
- Opportunity to work with passionate, inspired people and challenging, stimulating projects at significant scale.
- Hybrid work arrangement with teams generally in the office around four days per week; accommodations or flexibility may be discussed with the hiring team.
About WPP
WPP is a public advertising and marketing services group that provides creative, media, data, and public relations solutions to global brands. It operates agency networks including Ogilvy, VML/GroupM, Grey, and AKQA, generating revenue from agency fees and media investment management. Founded in 1971 and headquartered in London, it serves clients across 100+ markets worldwide.